Comment by pytness

if a gpg signature check fails, is it a correctness issue? a security issue? or both?