I have used all of the following keys at some time. They are kept here such that you can get my current keys, or verify signatures of old emails/files/software.

Key Signing Key

These keys are used exclusively for signing keys, both my own and folks where I have personally and throroughly verified the person's identity, and the key fingerprint, keyid, and bits. These are the keys you want to verify with me, as they signs all my keys and should be fully trusted. (You only need verify one, as I will sign everything with both keys for maximum compatibility.)

I strongly recommend that you verify my Key-Signing-Key fingerprint with me. If you are lazy, it is below. Note that if you don't verify fingerprints with me there is no chance you'll be given any trust level in my pgp.

New DSA Key-Signing-Key fingerprint:

pub  1024D/5217530F 2003-01-01 Brian Hatch (Key-Signing-Key) <bri@ifokr.org>
     Key fingerprint = A1AE F8A0 8571 9624 2004  9DB8 F75E 2F97 5217 530F
sub  2048g/AB6B82C6 2003-01-01

Personal Keys

These keys are used for any personal or business emails where I don't have a dedicated PGP key associated with a particular client.

I used to change keys every year. Come Jan 1, I'd remember and need to frantically make a new key. Got old. So now I've got my general use key, and until I have a reason, I'm going to just keep using it.

Client Specific keys

These keys were used exclusively for a specific purpose or client. I never copy my keys onto untrusted machines, thus separate ones for these organizations.

Software Signing Keys

These keys were used exclusively for signing Open Source software.