Note that a new key has been used to sign the commit for v33.0.2: B615CD133D438D85, this hasn't been documented anywhere (AFAICS) on the official palemoon website or forums, and the commits look suspicious in the commit listings on the repo: https://repo.palemoon.org/MoonchildProductions/Pale-Moon/commits/branch/release
I'm uncomfortable updating this package until I've had some sort of clarification that this new key is legit, so I've reached out to the main developer of Palemoon for clarification. Note that the official binaries are still signed by 40481E7B8FCF9CEC, so I'm relatively confident that the new key is fine and just hasn't been announced.
Pinned Comments
WorMzy commented on 2021-03-02 16:19 (UTC) (edited on 2022-08-03 21:12 (UTC) by WorMzy)
The following key is used to sign release commits:
40481E7B8FCF9CEC
Import it into your keyring however you want.
https://wiki.archlinux.org/index.php/GnuPG#Import_a_public_key