Can someone explain me how the proof of legit works?
He have posted a bitcoin address anywhere in the forum and will sign a message from it?
Yep this is the right way or even easier one if you are using online wallet may be to send transaction from that addy, but it has to not be edited, everybody can see if you have edited that post and then it looks like an scam .