This question already has an answer here:
- How to verify file Integrity? 1 answer
I've recently installed Kleopatra in order to use GPG for confirming the validity of downloads. I've downloaded the following (32-bit verison): https://www.claws-mail.org/win32/
I also downloaded the GPG signature beneath it, and tried to import it using Kleopatra. However, it fails, importing nothing.
I've tried to do some research and what I understand is that the signature is for verifying a key, however I cannot find a key from claws-mail. Have I done something wrong, or am I mistaken in thinking the signature should be able to verify a download? If I am, what is its purpose in being included with the download link?