#sphinx-doc

So, 1.5 is signed with a PGP key that expired in 2014.

And the key is also not listed anywhere official, which is sadtimes... Sigs don't matter much if there's no way to verify that the key used is allowed to sign this release

Or rather, there is one key that's listed in the README, but it should really be available in a different trustworthy source as well, like the official website.

But yeah, E9BEABB07E7B9CC3F56E62C91425F8CE5EBA0E07 isn't listed anywhere, and expired in 2014.

Oh wait, I'm stupid, no it didn't, it was created in 2014 .-.

But it still isn't listed as being a valid signing key anywhere, and if there's no way to verify that the key is a valid signing key, a PGP signature is less than useless.