For nm.debian.org, at 2021-02-08: I've worked with Gunnar for 10 years now, mostly in Ubuntu but also in Debian sponsoring some of input method and desktop works. For this past work, Gunnar Hjalmarsson often sent mails using the email address ubuntu@gunnar.cc and used his GPG key with fingerprint 0CFE 997B 7245 80A7 FA72 F8CF F0B1 10E7 5A69 2F32. I've made sure that he's able to decrypt encrypted messages sent to this key and able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Gunnar Hjalmarsson as they present themselves on nm.debian.org is the rightful owner of both email ubuntu@gunnar.cc and GPG key 0CFE 997B 7245 80A7 FA72 F8CF F0B1 10E7 5A69 2F32. Recent examples of sponsoring I did for Gunnar which were built from git where he signed the tags with his key https://salsa.debian.org/input-method-team/marisa * debian/0.2.6-3_exp2 https://salsa.debian.org/debian/ibus * debian/1.5.23-2 https://salsa.debian.org/gnome-team/gnome-user-docs * debian/3.38.1-1
Gunnar and I have worked together for quite a few years now. Here's the main thing that convinces me that this key is Gunnar's. This key is linked to Gunnar's Launchpad account, and is authorised to make uploads to parts of Ubuntu. Over the years, we've had many conversations in IRC in public and some in private. These are usually about changes which we're making in Ubuntu. We will often discuss what should be changed, come to a consensus and then Gunnar implements the change. These changes, correlating with the results of our discussions, were inevitably signed with this key. A couple of examples which can be verified (replace ' at ' with '@'), going back through time: https://lists.ubuntu.com/archives/hirsute-changes/2020-November/002062.html https://lists.ubuntu.com/archives/bionic-changes/2018-March/010906.html Latterly, when discussing Gunnar's application to become a DD¹, we have exchanged a few more actual signed emails using this key. I sent Gunnar an encrypted mail to the address below, containing a token, and he was able to repeat it back to me. I have also recently received signed emails using the same key. Recently I sponsored a few uploads to Debian, again presented with this key via signed tags on salsa. https://tracker.debian.org/news/1229699/accepted-ibus-typing-booster-2104-1-source-into-unstable/ https://tracker.debian.org/news/1203041/accepted-im-config-046-1-source-into-unstable/ https://tracker.debian.org/news/1203040/accepted-ibus-typing-booster-2102-1-source-into-unstable/ Due to the long-term interactions we had, I'm convinced that Gunnar Hjalmarsson as they present themselves on nm.debian.org is the rightful owner of both email ubuntu@gunnar.cc and GPG key 0CFE 997B 7245 80A7 FA72 F8CF F0B1 10E7 5A69 2F32. 2021-02-15 ¹ https://nm.debian.org/process/851/