Mozilla issued a new GPG signing subkey used for some Firefox and Thunderbird artifacts after the previous key was accidentally exposed. reading time: 2 minutes