Hi Mike, the signing key is a sub key of the key listed on this web site: https://www.openssl.org/community/otc.html The primary key fingerprint is also mentioned at https://github.com/openssl/openssl/blob/master/doc/fingerprints.txt Regards, Tomas Mraz, OpenSSL On Tue, 2022-11-01 at 18:14 +0000, Mike Banahan wrote: > Hi Tomas - I received information today abut the buffer overflow fix, > signed with what I believe is your PGP key. > > There is no mention of your key on the OpenSSL website, I eventually > found it on a keyserver. > > I realize that this is not the most important thing in the world, but > I > think it would help the verification process if the public key was > easily visible on the website! > > Many thanks for all your work, which is most appreciated. > > Best wishes, > > Mike Banahan > -- Tomáš Mráz, OpenSSL