Subject: bug#17625: 24.4.50; All installed packages marked "unsigned", no archive listed

From: Daiki Ueno <[email-masked]>
Date: Fri, 27 Jun 2014 09:47:06 +0900

Stefan Monnier <[email-masked]> writes:

> - Keep track of which archives have signatures and which don't (e.g. by
>   assuming that if `archive-contents' has a sig, then the packages also
>   have sigs).

This sounds like a good heuristic (like the way YUM does, IIRC).  It can
reduce the number of confirmations.