-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

For nm.debian.org, at 2021-02-08:
I've worked with Gunnar for 10 years now, mostly in Ubuntu but also in Debian sponsoring some of input method and desktop works.

For this past work, Gunnar Hjalmarsson often sent mails using the email address ubuntu@gunnar.cc
and used his GPG key with fingerprint 0CFE 997B 7245 80A7 FA72  F8CF F0B1 10E7 5A69 2F32.

I've made sure that he's able to decrypt encrypted messages sent to this key and able to sign messages with the same key.

Due to the long-term interactions we had, I'm convinced that Gunnar Hjalmarsson as they present themselves on nm.debian.org is the rightful owner of both email ubuntu@gunnar.cc and GPG key 0CFE 997B 7245 80A7 FA72  F8CF F0B1 10E7 5A69 2F32.

Recent examples of sponsoring I did for Gunnar which were built from git where he signed the tags with his key

https://salsa.debian.org/input-method-team/marisa
* debian/0.2.6-3_exp2

https://salsa.debian.org/debian/ibus
* debian/1.5.23-2

https://salsa.debian.org/gnome-team/gnome-user-docs
* debian/3.38.1-1
-----BEGIN PGP SIGNATURE-----
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=PrOC
-----END PGP SIGNATURE-----