Updated GPG key for signing Firefox and Thunderbird Releases
2026-08-10T19:23:57Z•da277b5eedfec7791da3b174b6c2f38d2604da14a4dca3b023885aa8aaad992f
FirefoxGPGHTTPSMozillaThunderbirdWeb-PKIbrowser-securitycertificate-authoritiescode-signingin-the-wild-exploitmixed-contentrelease-integrityroot-store-policysecurity-auditsupply-chain-security
What happened
Mozilla Security Blog updates covering Firefox and Thunderbird release-signing key changes, Web PKI root-store policy revisions, Firefox security responses including an in-the-wild exploit, mixed-content HTTPS upgrades, and security audit and hardening initiatives. The latest notice reports migration to a new GPG signing subkey after exposure of an unencrypted copy; consumers should verify updated fingerprints and signatures when validating Mozilla artifacts.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- mozilla_security_advisories
- Record identifier
- da277b5eedfec7791da3b174b6c2f38d2604da14a4dca3b023885aa8aaad992f
- Enrichment time
- 2026-08-10T19:23:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.