https://man.archlinux.org/man/pacman.conf.5#PACKAGE_AND_DATABASE_SIGNATURE_CHECKING
Optional (default)
Signatures are checked if present; absence of a signature is not an error. An invalid signature is a fatal error, as is a signature from a key not in the keyring.
How the fuck is this the default? it should at least be switched to
Required
Signatures are required; absence of a signature or an invalid signature is a fatal error, as is a signature from a key not in the keyring.
when adding mirrors. Preferably automatically. Or there should be a very clear warning.
- replies
- 2
- announces
- 0
- likes
- 0