<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi David,</p>
    <p>Thanks, I was able to retrieve the key and verify the signature.
      Maybe you add the information on the key used to sign on this
      page: <a class="moz-txt-link-freetext" href="https://www.flashrom.org/Downloads">https://www.flashrom.org/Downloads</a> (which by the way is
      outdated as it refers to 0.9.9)?</p>
    <p>Also, note that the section regarding ArchLinux on this page
      should be updated to. I, Bruno Pagani, am the new maintainer of
      this package following retirement of Giovanni. Also the link
      should rather point to
      <a class="moz-txt-link-freetext" href="https://www.archlinux.org/people/trusted-users/#Archange">https://www.archlinux.org/people/trusted-users/#Archange</a> than the
      maintainer package list. ;) Finally, please change “i686” to
      “x86_64” in the “package overview” link, since we dropped support
      for i686 distro-wide.</p>
    <p>Regards,<br>
      Bruno<br>
    </p>
    <div class="moz-cite-prefix">On Thu, Jan 18, 2018 at 8:35 AM, David
      Hendricks <a class="moz-txt-link-rfc2396E" href="mailto:david.hendricks@gmail.com"><david.hendricks@gmail.com></a> wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAJ_ov54fcZz2ugK_VPU5FFsaw0XVM3uhLYhEcjVrhp9Ck+u0cg@mail.gmail.com">
      <div dir="ltr">Hi Bruno,
        <div>Try again, it should be posted now (I used <a
            href="http://keys.gnupg.net" moz-do-not-send="true">keys.gnupg.net</a>).</div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Thu, Jan 11, 2018 at 9:44 AM,
          Archange <span dir="ltr"><<a
              href="mailto:archange@archlinux.org" target="_blank"
              moz-do-not-send="true">archange@archlinux.org</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
            <br>
            It seems that flashrom provides GPG sigs for the tarball,
            e.g.<br>
            <a
              href="http://download.flashrom.org/releases/flashrom-1.0.tar.bz2.asc"
              rel="noreferrer" target="_blank" moz-do-not-send="true">http://download.flashrom.org/<wbr>releases/flashrom-1.0.tar.bz2.<wbr>asc</a>,
            which is<br>
            nice.<br>
            <br>
            However, I seems I can’t find the key use to sign this on
            usual<br>
            keyservers. Could you tell me where it is available?<br>
            <br>
            Regards,<br>
            Bruno<br>
            <br>
            ______________________________<wbr>_________________<br>
            flashrom mailing list<br>
            <a href="mailto:flashrom@flashrom.org"
              moz-do-not-send="true">flashrom@flashrom.org</a><br>
            <a
              href="https://mail.coreboot.org/mailman/listinfo/flashrom"
              rel="noreferrer" target="_blank" moz-do-not-send="true">https://mail.coreboot.org/<wbr>mailman/listinfo/flashrom</a></blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>