Brilliant! Merci beaucoup smile

On this page, FireGPG offers to verify the quoted inline-PGP message. I click on "Verify" and it says:

PGP Signed Message, This message has been signed with the valid key ID null

and turns the box green. On the previous page in the same thread (where the message was not quoted), FireGPG correctly (as I don't have the appropriate public key) says

PGP Signed Message, could not be verified.

Also, is there any way to be sure I'm actually receiving an authentic copy of FireGPG without compiling it myself? There are no detached signatures and the download page isn't even protected with SSL.

Thanks,
Bruce