Mozilla Releases Updated GPG Key for Signing Firefox and Thunderbird

Mozilla has announced an important security update regarding its software release process. The organization has refreshed the GPG key used for signing Firefox and Thunderbird releases. This update applies to the official release channels for both applications. Users and maintainers who verify software signatures must update their trusted keys. Failing to update the GPG key may result in signature verification warnings or failures. The change aligns with routine cryptographic key rotation practices for software security. Further details on the specific key fingerprint and implementation can be found on Mozilla's security blog. Admins and packagers should incorporate the new key into their local keyrings promptly.