Fine!

Many, many thanks guys for your help!

As I'm new in this area I wasn't sure about this Warning message!

So, the verification is then OK and that's the important thing!

Thanks again

Hi,

I just downloaded electrum from electrum.org but the verification doesn't work as expected.
What I'm doing wrong?

Anyone knows?

Here is the commands and the error message:

pi@RaspiCrypto:~/Downloads $ gpg --import ThomasV.asc
gpg: /home/pi/.gnupg/trustdb.gpg: trustdb created
gpg: key 2BD5824B7F9470E6: public key "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1


gpg --verify Electrum-4.0.2.tar.gz.asc
gpg: assuming signed data in 'Electrum-4.0.2.tar.gz'
gpg: Signature made Wed 08 Jul 2020 09:48:15 AM CEST
gpg:                using RSA key 6694D8DE7BE8EE5631BED9502BD5824B7F9470E6
gpg: Good signature from "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>" [unknown]
gpg:                 aka "ThomasV <thomasv1@gmx.de>" [unknown]
gpg:                 aka "Thomas Voegtlin <thomasv1@gmx.de>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6694 D8DE 7BE8 EE56 31BE  D950 2BD5 824B 7F94 70E6

The problem for me is this warning message even if it says "good signature..."

Thanks