That doesn't mean a thing really, anyone can update a key to aHow was this verified?It was taken from official gnupg keyserver:
$ gpg --keyserver keys.gnupg.net --no-default-keyring --keyring
./BFBF0221.gpg --recv-keys BFBF0221
gpg: requesting key BFBF0221 from hkp server keys.gnupg.net
gpg: key BFBF0221: public key "Bruce Korb<bkorb AT gnu.org>" imported
gpg: Total number processed: 1
gpg: imported: 1
keyserver. The key hasn't a single signature on it. And it isn't
mentioned at all either on the website or with the download, neither by
name nor by fingerprint.
Archive powered by MHonArc 2.6.24.