>The a browser or email plugin can then retrieve the public key for [email protected] and confirm the body was sent by who it says it was.

Well, that's the issue, right? How does it do this?