Updated GPG Key for Signing Firefox and Thunderbird Releases

1 comments

• noman-land 43 minutes ago
  If the signing subkey was committed, that implies developers have it as a file on their system which I find surprising if true. They should be using hardware like a Yubikey or something. Especially for something this important.
  [-]
  • anon7000 27 minutes ago
    The signing key for Firefox stored on a single hardware yubikey available to a single person?
    [-]
    • computerfriend 23 minutes ago
      Multiple hardware devices can have the same key.