New comment by Chocimier on void-packages repository

https://github.com/void-linux/void-packages/pull/28400#issuecomment-771887987

Comment:
> You'd have to confirm that the new key is valid in some way.

Will publishing "it's legit, please update, i lost old key" message in same domain where source and new key is placed be enough?