Re: Security in the emacs package ecosystem

[Ihor Radchenko]

Ihor Radchenko <yantar92@posteo.net> writes:

> 2. Allow users to demand package.el to verify signatures when
>    downloading packages. Interested users can then increase their
>    security by rejecting packages without .sig file.

Ok. And it is indeed already in place.
`package-check-signature' customization.

-- 
Ihor Radchenko // yantar92,
Org mode contributor,
Learn more about Org mode at <https://orgmode.org/>.
Support Org development at <https://liberapay.com/org-mode>,
or support my work at <https://liberapay.com/yantar92>