#GPG

Mozilla Accidentally Put a Firefox Signing Key on GitHub. Here's Why You're Probably Fine.

A private key used to authenticate Firefox and Thunderbird downloads was briefly stored in the wrong place. Mozilla has replaced it and found no sign anyone misused it.