That is enough, given that you've fetched or compared the key from a trusted GitHub.com server.