-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Gunnar and I have worked together for quite a few years now.

Here's the main thing that convinces me that this key is Gunnar's. This key is
linked to Gunnar's Launchpad account, and is authorised to make uploads to
parts of Ubuntu. Over the years, we've had many conversations in IRC in public
and some in private. These are usually about changes which we're making in
Ubuntu.  We will often discuss what should be changed, come to a consensus and
then Gunnar implements the change. These changes, correlating with the results
of our discussions, were inevitably signed with this key. A couple of examples
which can be verified (replace ' at ' with '@'), going back through time:

  https://lists.ubuntu.com/archives/hirsute-changes/2020-November/002062.html
  https://lists.ubuntu.com/archives/bionic-changes/2018-March/010906.html

Latterly, when discussing Gunnar's application to become a DD¹, we have
exchanged a few more actual signed emails using this key.

I sent Gunnar an encrypted mail to the address below, containing a token, and
he was able to repeat it back to me. I have also recently received signed
emails using the same key.

Recently I sponsored a few uploads to Debian, again presented with this key via
signed tags on salsa.

  https://tracker.debian.org/news/1229699/accepted-ibus-typing-booster-2104-1-source-into-unstable/
  https://tracker.debian.org/news/1203041/accepted-im-config-046-1-source-into-unstable/
  https://tracker.debian.org/news/1203040/accepted-ibus-typing-booster-2102-1-source-into-unstable/

Due to the long-term interactions we had, I'm convinced that Gunnar
Hjalmarsson as they present themselves on nm.debian.org is the rightful
owner of both email ubuntu@gunnar.cc and GPG key 0CFE 997B 7245 80A7
FA72  F8CF F0B1 10E7 5A69 2F32.

2021-02-15

¹ https://nm.debian.org/process/851/
-----BEGIN PGP SIGNATURE-----
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=rvmq
-----END PGP SIGNATURE-----