# upstream has two different downloads for their signing
# key, one 404s, the other 403s, the key is not on the
# keyserver, and… I just give up.
# http://htmlpurifier.org/releases/ has the signature file,
# but I cannot verify it.
php-htmlpurifier source: debian-watch-does-not-check-openpgp-signature
