I remember when we used to sign binaries and packages and nobody checked the pgp files anyways. We could have something similar better today, just need to be au

I remember when we used to sign binaries and packages and nobody checked the pgp files anyways. We could have something similar better today, just need to be automated enough.