On 05/06/2018 01:08 PM, notify--- via aur-requests wrote:
> Request #11319 has been rejected by Eschwartz [1]:
>
> Checksums don't add security, that's why they're the "integrity
> check", not the "security check". Do you know how many [core] packages
> don't have PGP signatures available at all?
Request #11319 has been rejected by Eschwartz [1]:
Checksums don't add security, that's why they're the "integrity
check", not the "security check". Do you know how many [core] packages
don't have PGP signatures available at all? Those are used on far more
devices.
Granted, using PGP when
