> On Jun 13, 2016, at 12:08 PM, Marvin Humphrey <mar...@rectangular.com> wrote: > > On Mon, Jun 13, 2016 at 11:37 AM, Julian Hyde <jh...@apache.org> wrote: > >> But I imported >> https://github.com/apache/incubator-beam/blob/v0.1.0-incubating-RC3/KEYS >> <https://github.com/apache/incubator-beam/blob/v0.1.0-incubating-RC3/KEYS> >> easily enough. > > Bundling PGP keys inside a package is worse than worthless -- an attacker can > just bundle spoofed keys with a bogus distort!
My mistake — thanks for the correction! Julian --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
