Comment by what

Where did you get the impression the author thinks it’s a bad thing? From the article:

> These are public keys, which are meant to be published - recovering one lets anyone check a signature, not forge one.