#gRegor`I think so. With the important caveat that if your key is available over http, they don't have to compromise your server to impersonate you, just MITM your site. I'd be concerned about someone new to indieweb / crypto putting a GPG key on their non-secure site.