I've been using GPG keys to sign my email for a couple of months now. Now, it is quite pointless to have an email signed if there is no way of verifing the keys. I used to have the public keys published on my website, but today I submitted them to http://pgp.mit.edu/. Should you receive an alleged email from me, be sure to check its authenticity.