For nm.debian.org, at 2021-01-20: For the past 9 months, I have worked with Mark Hindley on matters relating to the support of alternative init systems in Debian. For this past work, Mark Hindley sent mails using the email address mark@hindley.org.uk which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 506C 15A4 2B0A F5A0 A854 23EE D28A 45BF 3287 D649. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Mark Hindley as they present themselves on nm.debian.org is the rightful owner of both email mark@hindley.org.uk and GPG key 506C 15A4 2B0A F5A0 A854 23EE D28A 45BF 3287 D649. Signed by: Matthew Vernon <matthew@debian.org>
For nm.debian.org, at 2021-01-29: I have been in touch with Mark since roughly 2007, he took over my apt-cacher package. The earliest use of the key 506C 15A4 2B0A F5A0 A854 23EE D28A 45BF 3287 D649 known to me was in a conversation in 2017, I can verify the signature of that message in my mail archive without any issue, it appears to be the same key. I can confirm that we can communicate in encrypted way using his private key which was bundled with the key aforementioned key received back then. Due to the long-term interactions we had, I'm convinced that Mark Hindley as he present himself on nm.debian.org is the rightful owner of both email mark@hindley.org.uk and GPG key 506C 15A4 2B0A F5A0 A854 23EE D28A 45BF 3287 D649.