mtnviewpro

ArchivioID is an add-on plugin for ArchivioMD that adds a full cryptographic identity and signature layer to your WordPress site. It manages GPG public keys, verifies detached OpenPGP signatures on posts, supports multi-signer workflows with configurable thresholds, and exposes public proof pages so anyone can verify authenticity without logging in.
<h4>Key Features</h4>
<ul>
<li>Public Key Management: Store, manage, and rotate GPG public keys with expiry tracking and administrator alerts</li>
<li>Post Signature Verification: Upload detached .asc signature files for posts — verified automatically using phpseclib v3</li>
<li>Browser-Based Signing: Sign posts directly in the WordPress admin using a browser-held key — no server-side key material required</li>
<li>Multi-Signature Workflows: Collect signatures from multiple key holders on a single post; each signer identified by key fingerprint and timestamp</li>
<li>Configurable Signature Threshold: Require a minimum number of verified signatures before a post displays the verified badge — configurable globally or per post type</li>
<li>Algorithm Enforcement Floor: Block weak signature algorithms (MD5, SHA-1) and enforce minimum RSA/DSA key sizes at upload, REST submission, and re-verification time</li>
<li>Automated Re-Verification: Daily WP-Cron job re-verifies all signed posts and flags content that has changed since signing</li>
<li>Key Expiry Notifications: Email alerts at 30, 14, and 3 days before a key expires, sent to the key owner or site admin</li>
<li>Key Rotation Workflow: Admin UI for generating replacement keys, migrating existing signatures, and retiring old keys</li>
<li>Bulk Verification: Verify all signed posts in a single admin action with per-post status reporting</li>
<li>REST API: Full REST endpoint for programmatic signature submission, key retrieval, and verification status</li>
<li>Key Server: Publishes active public keys at a stable well-known endpoint for external verifiers</li>
<li>Bundle Download: Downloadable evidence package (hash, signatures, key fingerprints, timestamps) for any post</li>
<li>Public Proof Pages: Stable public permalink at <code>/archivio-id/verify/{post_id}</code> — renders full chain of custody without requiring admin access</li>
<li>Audit Logging: Immutable log of all verification attempts, key changes, and rotation events</li>
<li>WP-CLI Support: Full CLI interface for batch operations and automated pipelines</li>
<li>Visual Status Badges: Front-end badge showing verified / unverified / threshold-unmet status on every post</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 7.4 or higher (tested up to PHP 8.5)</li>
<li>ArchivioMD plugin version 1.5.0 or higher (required parent plugin)</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Upload your GPG public key via the ArchivioID → Key Management admin page</li>
<li>Create or edit a post in WordPress</li>
<li>Upload a detached .asc signature file for the post, or sign directly in the browser</li>
<li>ArchivioID verifies the signature immediately and on every subsequent automated re-verify run</li>
<li>A verification badge appears on the front end; a public proof page is available at a stable permalink</li>
</ol>
<h4>Technical Details</h4>
<ul>
<li>Uses phpseclib v3 for all cryptographic operations — no system GPG installation required</li>
<li>Uses OpenPGP-PHP for packet parsing and key handling</li>
<li>All key material and signatures stored in dedicated WordPress database tables</li>
<li>Algorithm enforcement floor consulted at upload, REST submission, and re-verification time</li>
<li>Multi-signature threshold evaluated before displaying the verified badge</li>
<li>Public proof pages require no admin login — safe to share externally</li>
<li>Fully WordPress coding standards compliant</li>
</ul>
<h4>External Services</h4>
This plugin can make outbound HTTP requests to the following third-party services. All external lookups are opt-in and can be disabled under ArchivioID → Settings → Key Server Lookup.
keys.openpgp.org (VKS API) 
When an administrator uses the Key Management page to look up a GPG public key by fingerprint or email address, the plugin sends a GET request to <code>https://keys.openpgp.org/vks/v1/</code>. No personal data beyond the fingerprint or email address entered by the administrator is transmitted. This request is made only on explicit administrator action and only when the “Allow key server lookup” setting is enabled. 
* Service: https://keys.openpgp.org 
* Privacy policy: https://keys.openpgp.org/about/privacy
WKD — Web Key Directory (user’s email domain) 
When an administrator looks up a key by email address, the plugin may also query the Web Key Directory endpoint on the domain portion of that email address (e.g. <code>https://example.com/.well-known/openpgpkey/</code>). This follows the OpenPGP Web Key Directory specification (draft-koch-openpgp-webkey-service). The request is made only on explicit administrator action and only when key server lookup is enabled. 
* Specification: https://datatracker.ietf.org/doc/draft-koch-openpgp-webkey-service/ 
* The domain contacted is determined entirely by the email address the administrator enters; it is not a fixed third-party service.
Identity Proof URLs (user-supplied) 
Administrators may optionally store a public identity proof URL alongside each key (for example, a Keyoxide or Keybase profile page). These URLs are stored in the WordPress database and displayed as links in the frontend badge tooltip. The plugin itself makes no outbound request to these URLs; they are rendered as standard hyperlinks for visitors to follow voluntarily. 
* Keyoxide: https://keyoxide.org 
* Keybase: https://keybase.io 
* Any HTTPS URL may be entered; the plugin validates only that the value is a well-formed HTTPS URL.
<h3>Source Code for Bundled Minified JavaScript</h3>
This plugin includes <code>assets/js/openpgp.min.js</code>, the minified build of OpenPGP.js.
<ul>
<li>Project home: https://openpgpjs.org</li>
<li>Source code: https://github.com/openpgpjs/openpgpjs</li>
<li>License: LGPL-3.0-or-later</li>
<li>Version used: 5.x (see <code>assets/js/openpgp.min.js</code> file header for exact version)</li>
</ul>
To reproduce the minified file from source:
<pre><code>`
</code></pre>
git clone https://github.com/openpgpjs/openpgpjs.git 
cd openpgpjs 
npm install 
npm run build # produces dist/openpgp.min.js 
 `
Copy <code>dist/openpgp.min.js</code> to <code>assets/js/openpgp.min.js</code> in this plugin.
<h3>Security</h3>
<ul>
<li>All inputs sanitized and validated; all outputs escaped</li>
<li>Nonce verification on all forms and AJAX handlers</li>
<li>Capability checks (<code>manage_options</code>) on all admin actions</li>
<li>REST API write endpoints require authentication</li>
<li>SQL prepared statements throughout; no raw query interpolation</li>
<li>Algorithm enforcement floor blocks known-weak cryptographic primitives</li>
</ul>
<h3>Support</h3>
For support, please visit: https://mountainviewprovisions.com/archivio-id
<h3>License</h3>
This plugin is licensed under GPLv2 or later.

ArchivioID

OpenPGP signature verification, multi-signer workflows, key lifecycle management, and public proof pages for ArchivioMD.

Michael Sumner

ScoreDetect

Timestamps allow you to increase content authenticity by displaying a rich timeline of your post updates. The timeline can be independently verified by the public.
The Timestamps plugin offers SEO-friendly blockchain timestamping for content, enhancing Google’s E-E-A-T signals: Experience, Expertise, Authoritativeness, and Trustworthiness. It provides tamper-proof evidence of content creation time, boosting content authenticity and protecting intellectual property from theft. The plugin supports automated workflows for consistent timestamping, enabling real-time verification and improving user trust and engagement. ScoreDetect’s eco-friendly, gas-free system generates verification certificates quickly, helping businesses demonstrate verified content history and authority. This technology is positioned as a future-proof strategy for SEO and content protection in the evolving digital landscape.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/VLEu33H9jzs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>SCOREDETECT: THE #1 WORDPRESS TIMESTAMPING PLUGIN</h3>
Since 2023, ScoreDetect has helped several users and businesses protect their digital assets and increase their content authenticity.
Now, we are bringing the power to WordPress with the Timestamps plugin. With our fresh features, eco-friendly and secure blockchain, active plugin updates, and active customer support.
<h3>KEY FEATURES</h3>
Here is a list of features included in the plugin:
Boost SEO: The Timestamps plugin can improve trustworthiness by showcasing machine-readable hyperlinks to multiple proofs that you own the content first. This ultimately improves your SEO through multiple factors such as: improved readership, innate security, and provenance via blockchain evidence.
Protect your content: Your content gets a digital signature, so that you can claim proof of your content.
Custom Post Types Support: The plugin supports all publicly available custom post types such as Pages, and any other registered post type of your liking.
Gutenberg / Block Editor Ready: We aim for the latest technology. The plugin is ready for the WordPress block editor.
Classic Editor Ready: The plugin is also ready for the Classic Editor, so you can use it with the editor you prefer.
Secure Blockchain: Your timestamped certificate is on the blockchain, making it unchangeable. This significantly increases trust amongst your users.
Create Multiple Verification Certificates: You can re-save your content after modifying it, to gather a timeline of content modification. Not just 1 certificate, but a chain certificate.
Content Authenticity Built-In: Anyone can publicly view your verification certificate to verify the claims 24/7
Fully Transparent Auditable Trail: Blockchain data can be viewed by everyone at any time. This allows independent scrutiny, thereby increasing transparency and trust.
Timestamps Shortcode: You can use the <code>[timestamps]</code> shortcode to display the verification certificate on your posts, pages, or custom post types. In Gutenberg, type <code>/shortcode</code>, press Enter, and input the <code>[timestamps]</code> shortcode.
Screenshots Button: Allow your users to easily timestamp their screenshots by adding a <code>[timestamps_screenshot]</code> shortcode button. Each screenshot is unique with a QR code, date/time, and certificate ID.
WooCommerce Support: The plugin is compatible with WooCommerce. You can timestamp your orders and products and protect your digital assets.
Privacy Protection: We strive for privacy, therefore only administrators with the manage_options capability can have access to perform actions with this plugin.
The plugin connects to the api.scoredetect.com service to create and update the verification certificates. The service is free to use with a 7-day free trial guarantee, and the plugin is free to use.
<h3>GDPR COMPLIANT</h3>
The plugin is GDPR compliant. It does not store any personal data. The plugin only stores the SHA-256 checksum of the content on the blockchain. The plugin does not store any personal data of the users. The plugin does not track any user data. The plugin does not use cookies. You can view all of the plugin code on <a href="https://plugins.svn.wordpress.org/timestamps/" rel="nofollow ugc">https://plugins.svn.wordpress.org/timestamps/</a>
<h3>HOW TO GET STARTED</h3>
<ol>
<li>First, you will need to properly install the Timestamps plugin.</li>
<li>Activate the plugin in WordPress.</li>
<li>Visit the Settings › Timestamps page, and follow the instructions to authenticate your account.</li>
<li>Click the “Save Changes” button.</li>
<li>Enjoy! You can now visit any post, page, or custom post type; and timestamp your content!</li>
</ol>
<h3>NEED HELP?</h3>
Page Builders Not Working? There are lots of Page Builders. We aim to make the plugin compatible with all of them. You can view the documentation for your Page Builder on <a href="https://docs.scoredetect.com/" rel="nofollow ugc">https://docs.scoredetect.com/</a> for instructions.
24/7 Support: The plugin provides comprehensive customer support through email <a href="mailto:support@scoredetect.com" rel="nofollow ugc">support@scoredetect.com</a>. You can reach out to our support team at any time for assistance.
API Documentation: The API Documentation is available here: 
<a href="https://docs.scoredetect.com/" rel="nofollow ugc">https://docs.scoredetect.com/</a>
Terms and Conditions: We are transparent – here are our Terms and Conditions: 
<a href="https://www.scoredetect.com/terms-and-conditions" rel="nofollow ugc">https://www.scoredetect.com/terms-and-conditions</a>
Privacy Policy: We value privacy – here is our Privacy Policy: 
<a href="https://www.scoredetect.com/privacy-policy" rel="nofollow ugc">https://www.scoredetect.com/privacy-policy</a>
Sample Verification Certificate in-action: <a href="https://explorer.scoredetect.com/certificate/3ccfc7fd-bf8a-44c8-b2a3-3b3bd09a24b8" rel="nofollow ugc">https://explorer.scoredetect.com/certificate/3ccfc7fd-bf8a-44c8-b2a3-3b3bd09a24b8</a>

Timestamps – SEO-friendly Blockchain Integration for WordPress

Help boost SEO. Timestamp your WordPress content to empower your content authenticity and increase user trust.

ArchivioID vs Timestamps – SEO-friendly Blockchain Integration for WordPress