3 ms·
The packages don't need signing! The repo database is signed and the package checksums are inside. If the checksum doesn't match, the package is refused to be i
by feld 10y ago
The packages don't need signing! The repo database is signed and the package checksums are inside. If the checksum doesn't match, the package is refused to be installed. This is vastly simpler than signing every package.