#4 Check GPG-keys when downloading files

[Tarjei Huse]

Rpm (and soon dpkg?) supports gpg-signing of packages
to ensure they have not been tampered with.

Apt-got should support checking the gpg-keys before
making a package available for download.