Re: no gnupg directory under elpa?

[Stefan Monnier]

>    All installed packages are red and unsigned, and have *nothing* in
>    their archive column -- it's not just ELPA, it's also Melpa and
>    Marmalade.

Please M-x report-emacs-bug about it.

> It sounds like the feature must still be implemented, everywhere.

Indeed, IIUC the necessary sig-checking code was added to package.el but
the GNU ELPA scripts haven't yet been updated to generate those sigs.

> Emacs makes a nice root-kit platform, i hope security features for the
> package system(s) are high priority for them... am i being realistic?

Somewhat high, but not super high, no.


        Stefan