Hosted on MSN

Mozilla revokes exposed Firefox signing key using compromise code, not rotation

Mozilla disclosed Monday that an unencrypted copy of the private GPG signing subkey used to authenticate Firefox and Thunderbird software packages was accidentally committed to one of the organization ...
Bleeping Computer

Mozilla updates GPG signing key for Firefox releases after exposure

Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub. However, in a Monday blog post, it noted that the risk of ...