From fb4dec9bd6f15868d552f0f4f619e75255b21ee1 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Tue, 9 Jul 2019 17:23:47 -0400
Subject: [PATCH] add another out-of-band source for the key

---
 static/install.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/static/install.html b/static/install.html
index 107a5fbb..aa7f871e 100644
--- a/static/install.html
+++ b/static/install.html
@@ -121,10 +121,10 @@ RWQZW9NItOuQYJ86EooQBxScfclrWiieJtAO9GpnfEjKbCO/3FriLGX3</pre>
             made with the previously used GPG key to verify that this is an authorized key
             rotation. The public key has also been published via the official
             <a href="https://twitter.com/GrapheneOS/status/1145259815851253762">@GrapheneOS Twitter
-            account</a> and
-            <a href="https://www.reddit.com/r/GrapheneOS/comments/c7gb3f/grapheneos_factory_images_are_now_signed_with/esewpm9">/u/GrapheneOS
-            Reddit account</a>. When the current signing key is replaced, the new key will be
-            signed with it.</p>
+            account</a>,
+            <a href="https://www.reddit.com/r/GrapheneOS/comments/c7gb3f/grapheneos_factory_images_are_now_signed_with/esewpm9">the /u/GrapheneOS
+            Reddit account</a> and <a href="https://github.com/GrapheneOS/releases.grapheneos.org/blob/master/static/factory.pub">is available on GitHub</a>.
+            When the current signing key is replaced, the new key will be signed with it.</p>
             <p>Download the factory images for the device from <a href="/releases">the releases
             page</a>.</p>
             <p>Verify the factory images using the signature:</p>