[aur-general] Discussion about AUR packages signing

[Ralf Mardorf]

In the past, what packages provided by AUR needed signing, because after
uploading somebody manipulated the packages? AFAIK https for the AUR
downloads and checksums for the upstream downloads in the past didn't
cause that often serious trouble, IIRC it usually was safe.

Is there such a security mechanism, if we build from ABS?