On Tue, Mar 28, 2017 at 03:03:23PM +0200, Marius Bakke wrote: > To be clear, simply "vouching" for the commits in a signed message is > good enough for me. It would be good to have the signing key for future > reference, but if you don't want to disclose it I'm fine with that. The key that was used mistakenly, A5C5 92EA 606E 7106 A6A3 BC08 98B2 1575 91E1 2B08, is still available on the key servers.