Slawomir Jaranowski opened MGPG-114 and commented

We check file size with key ... but we allow big key from environments variable.

Even if large key are not recommended they are supported by standard gpg.

We have many keys with size 4096 - https://downloads.apache.org/maven/KEYS

Remote Links:

• GitHub Pull Request #83