-----BEGIN PGP SIGNED MESSAGE----- 
Hash: SHA512

For nm.debian.org, at 2021-01-21:

For the past two years, I have worked with Glenn Strauss on lighttpd.

Glenn is the primary upstream author of lighttpd. He signed all recent upstream
releases with a different key whose fingerprint is:

    649D 0DD7 67FF 2062 02A7 6C51 58F1 4A78 6FE1 98C8

I've verified those signatures for all uploads that I made to Debian in the
lighttpd package.

With the abovementioned upstream key, Glenn sent me a signed transition
statement endorsing his new key for Debian: 

    8EC0 3CE5 78AA CDD4 0356  AEE2 CCF9 03D8 6BBE ED0C

I've made sure that he is able to decrypt encrypted messages sent to this key
and that he is able to sign messages with the same key.

Due to the interactions during the past two years we had, I'm convinced that
Glenn Strauss as he presents himself on nm.debian.org is the rightful owner of
both email gstrauss@gluelogic.com (the one on the key, not
gs-debian.org@gluelogic.com, but it seems like Glenn is in control of the whole
domain and uses local parts for sorting), GPG key 649D 0DD7 67FF 2062 02A7 6C51
58F1 4A78 6FE1 98C8. Due to the signed transition statement, I'm also convinced
that he is the rightful owner of GPG key 8EC0 3CE5 78AA CDD4 0356 AEE2 CCF9
03D8 6BBE ED0C.
-----BEGIN PGP SIGNATURE-----
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=fRyq
-----END PGP SIGNATURE-----