thelema/odb — Issue #38: checking signatures of packages if available
Author: HappyCrow
Created: 2012-03-02 01:38:03+00:00
State: open

Hello,

I am a bit concerned by this:
odb allows to download then install
things but no verification is done.

Maybe it would be nice if a package
has a known signature then
we check it before installing the thing.

I was thinking of a new optional field in
each package description.
Optional because some packages are not signed
by their author.

Regards,
F.