For nm.debian.org, at 2024-03-23: I've been sponsoring play.it, play.it-community as well as play.it-vv221 for Antoine Le Gonidec since August 2023. Their git commits from the respective packaging repositories are signed using a gpg key with fingerprint 94B1DC4CF7485EC16E97EC98636B78F91CEB80D8. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Antoine Le Gonidec as they present themselves on nm.debian.org is the rightful owner of both email vv221@dotslashplay.it and gpg key 94B1DC4CF7485EC16E97EC98636B78F91CEB80D8.
For nm.debian.org, at 2024-03-31: Since at least 2018, I have worked with Antoine Le Gonidec on play.it and observed their growing Debian involvement across teams. Notably they have a long history of PGP key usage: signed git tags, release tarballs and emails; a key transition in 2021 that I personally verified[1]; git commits (since 2023) For this past work, Antoine Le Gonidec sent mails using the email addresses vv221@dotslashplay.it and debian@dotslashplay.it which is the one they're using on nm.debian.org, and they signed their work and email using (since 2021) a PGP key with fingerprint 72CE 56AD D3F7 AB42 E50E F22B CD3A 6DF7 5742 FDB1. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Antoine Le Gonidec as they present themselves on nm.debian.org is the rightful owner of PGP key 72CE 56AD D3F7 AB42 E50E F22B CD3A 6DF7 5742 FDB1 and emails debian@dotslashplay.it, vv221@dotslashplay.it. [1]: https://salsa.debian.org/games-team/play.it/-/commit/f7d2e3316e936bbe8d0c76b5f40ece1f142fb6cb