Updated GPG key for signing Firefox and Thunderbird Releases – Mozilla Security Blog
- Our review of available audit records found no evidence that the key was accessed by an unauthorized party while it was present in the repository.
- Access to the repository was limited to a small group within Mozilla, all of whom already had authorized access to the key through other means.
Unverified
- Our review of available audit records found no evidence that the key was accessed by an unauthorized party while it was present in the repository.
- Access to the repository was limited to a small group within Mozilla, all of whom already had authorized access to the key through other means.
Sources: Mozilla