-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I know Thomas Koch <thomas@koch.ro> since at least 2009. Already back
then he has been a strong advocate of free software and had a faible
for modern programming languages.

He's maintaining official Debian packages since at least January 2010
(according to minechangelogs) and is a DM since June 2010 (according
to the debian-keyring changelog). He's active in multiple teams and I
know at least of activity in the Emacsen and the Haskell teams, but he
also seems to be (or at least was) involved in the Java team.

https://qa.debian.org/developer.php?login=thomas%40koch.ro currently
shows 14 packages. I have reviewed and/or sponsored four of those,
partially multiple times: termit, simhash, unpaper, and xwrited. His
packaging work is conscientious and he knows what he's doing.

He attended already at least three DebConfs (I remember having spared
some time with him at DC11, DC13 and DC15) and people have starting to
expect that he is a DD already two years ago. (Overheard at the Debian
meetup in Zurich: "Huh, you're not a DD?").

At DebConf11, he came up with the idea of Skills Exchange sessions,
which seem to have become an integral part of DebConf since then.

So from my point of view, Thomas can be trusted to have full,
unsupervised, unrestricted upload permissions to the Debian
archive. I'm sure, he'll be an enrichment for Debian.


Note: The text above is an updated version of my advocay statement
from 2.5 years ago for Thomas Koch becoming a DD (uploading):

  https://lists.debian.org/debian-newmaint/2015/11/msg00024.html

Everything I wrote back then with the exception of a few numbers and
dates still stands.
-----BEGIN PGP SIGNATURE-----
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=Sbnd
-----END PGP SIGNATURE-----