-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

For nm.debian.org, at 2023-01-13:
For the past 5 years, I have worked with Douglas Kosovic on network-manager-l2tp.

For this past work, Douglas Kosovic sent mails using the email address doug@uq.edu.au
which is the one he is using on nm.debian.org.

During that time, Douglas used a key with fingerprint 
E48B D89A 1C51 BFA2 8413  D183 49A7 787E F8D3 C039.
His package uploads to mentors.d.o were signed with that key and 
upstream releases were signed with this key as well, see e.g.
https://github.com/nm-l2tp/NetworkManager-l2tp/releases/tag/1.20.6

I encouraged him to apply for DM.
During that process, he created a new GPG key with stronger encryption and
fingerprint 2B4F 9EDC AE00 DEE4  D0D7 A6E5 8895 3E6F 011C DC96.

I've made sure that he is able to decrypt encrypted messages sent to this
new key and that he is able to sign messages with the same key.

Doug also sent a statement to me signed by his old key that he is now using the
new key including its fingerprint. So I'm confident that he controls both keys.

New releases of network-manager-l2tp also use his new key, see e.g.
https://github.com/nm-l2tp/NetworkManager-l2tp/releases/tag/1.20.8

Due to the long-term interactions we had, I'm convinced that Douglas Kosovic as he
presents himself on nm.debian.org is the rightful owner of both email
doug@uq.edu.au and GPG key 2B4F 9EDC AE00 DEE4  D0D7 A6E5 8895 3E6F 011C DC96.
-----BEGIN PGP SIGNATURE-----
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=xANg
-----END PGP SIGNATURE-----