Alexander Neumann <alexander@bumpern.de> writes: > What about using the apt-check-sigs script provided by aj > (http://people.debian.org/~ajt/apt-check-sigs)? It's not part of Debian, and thus not trivial to set up. I'm sorry, but fiddling with GnuPG to create the correct keyring for gpgv, under the correct user ID, is beyond the skills of my target group. 8-(