zhaijack commented on issue #420: Issue 419: dockerfile - add script to get GPG_KEY URL: https://github.com/apache/bookkeeper/pull/420#issuecomment-321219512 @caiok. I agree with you that the 3 verification is some kind of superfluous. It seems the integrity is the thing that we need to handle here. But since we are already here, there is no harm to verify more than less. provided another way to get the keys and verify the signature, this may be more safe, and could avoid the server connection error(which I really met at the day before yesterday). ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
With regards, Apache Git Services
