What it means
A public key can be shared; its private counterpart must be protected. A fingerprint can identify a specific key, but the fingerprint itself needs a trusted verification path.
For hosting
Check full fingerprints, expiry and revocation information before sending sensitive reports. A short key ID or a brand name alone is not enough.
Where did the fingerprint come from?
Confirm the full value through a trusted independent route and check expiry or revocation. A convincing name attached to an unverified key is insufficient.