SSH signatures seem to be becoming more popular; I've seen them on Git tags. However, makepkg cannot verify them yet.
This should be orthogonal to https://gitlab.archlinux.org/pacman/pacman/-/issues/67.
↧