Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub. [...]
Mozilla updates GPG signing key for Firefox releases after exposure
Summary + source link. No paywalls, no tracking.