MeeGo need a stronger gpg check mechanism which base on rpm package

[Jeff Johnson]

tracker

[Jeff Johnson (n3npq)]

http://bugs.meego.com/show_bug.cgi?id=3622

[Jeff Johnson (n3npq)]

rpmlib can be enabled to verify every package signature whenever read.
This is typically disabled by metainstallers like zypp/yum/smart.

But all depends on what your threat model is ... there's usually
no reason why every package signature needs to be continually
verified; once is often sufficient.