Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Summary

Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories. That key is how a user, or a Linux distribution packaging the browser, confirms a downloaded Firefox tarball came from Mozilla and was not tampered with. That decision carries a cost for

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.