diff --git a/gpgkey-815B63982A79F8E7C72786C4762B57BB784206AD.gpg b/gpgkey-815B63982A79F8E7C72786C4762B57BB784206AD.gpg
new file mode 100644
index 0000000..4859705
Binary files /dev/null and b/gpgkey-815B63982A79F8E7C72786C4762B57BB784206AD.gpg differ
diff --git a/notmuch-0.29.1.tar.xz.asc b/notmuch-0.29.1.tar.xz.asc
new file mode 100644
index 0000000..3a9a3d4
--- /dev/null
+++ b/notmuch-0.29.1.tar.xz.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Gtrx
+-----END PGP SIGNATURE-----
diff --git a/notmuch.spec b/notmuch.spec
index 40431e4..f00a087 100644
--- a/notmuch.spec
+++ b/notmuch.spec
@@ -18,11 +18,14 @@
 
 Name:           notmuch
 Version:        0.29.1
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        System for indexing, searching, and tagging email
 License:        GPLv3+
 URL:            https://notmuchmail.org/
 Source0:        https://notmuchmail.org/releases/notmuch-%{version}.tar.xz
+Source1:        https://notmuchmail.org/releases/notmuch-%{version}.tar.xz.asc
+# Imported from public key servers; author provides no fingerprint!
+Source2:	gpgkey-815B63982A79F8E7C72786C4762B57BB784206AD.gpg
 
 # These should be removed in Fedora 26
 Obsoletes:      notmuch-deliver < 0.19-5
@@ -34,6 +37,7 @@ BuildRequires:  emacs-el
 BuildRequires:  emacs-nox
 Buildrequires:  gcc gcc-c++
 BuildRequires:  glib libtool
+BuildRequires:	gnupg2
 %if 0%{?fedora} >= 27
 BuildRequires:  gmime30-devel
 %else
@@ -145,6 +149,7 @@ notmuch-vim is a Vim plugin that provides a fully usable mail client
 interface, utilizing the notmuch framework.
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %setup -q
 
 %build
@@ -282,6 +287,9 @@ vim -u NONE -esX -c "helptags ." -c quit
 %{_datadir}/vim/vimfiles/syntax/notmuch-show.vim
 
 %changelog
+* Thu Jul 25 2019 Michael J Gruber <mjg@fedoraproject.org> - 0.29.1-2
+- verify package signature
+
 * Wed Jun 12 2019 Michael J Gruber <mjg@fedoraproject.org> - 0.29.1-1
 - Update to 0.29.1