http://hiddenwep33eg4w225lcdwcez4iefacwpiia6cwg7pfmcz4hvijzbgid.onion/index.php?title=GNU_Privacy_Guard&mobileaction=toggle_view_desktop
People meet each other to verify public key signatures, often at "key signing parties", and then sign public keys (using their private keys). Some people choose to upload their public key, with others' signatures, to "key servers", which help to automate the process of exchanging keys.