Re:Malware Found in the Ubuntu Snap Store
by eat_veggies on Saturday May 12, 2018 @07:13PM
(#17056504)
I'm pretty sure all packages in the official repositories are signed:
> Official packages: A developer made the package and signed it. The developer's key was signed by the Arch Linux master keys. You used your key to sign the master keys, and you trust them to vouch for developers.
> Official packages: A developer made the package and signed it. The developer's key was signed by the Arch Linux master keys. You used your key to sign the master keys, and you trust them to vouch for developers.
source: https://wiki.archlinux.org/index.php/Pacman/Package_signing