Question about latest release iso

[JD]

  On 10/17/2010 01:24 PM, Arkadiusz Miskiewicz wrote:
> On Sunday 17 of October 2010, JD wrote:
>>    On 10/17/2010 01:10 PM, Arkadiusz Miskiewicz wrote:
>>> On Sunday 17 of October 2010, Paweł Zuzelski wrote:
>>>>> What about importing he GPG? From where?
>>>> I'm not sure, but as I know th packages are not gpg-signed.
>>> main packages are signed:
>>>
>>> ftp://ftp.pld-linux.org/dists/th/PLD-3.0-Th-GPG-key.asc
>> So, does poldek have a comand to import the sigs
>> the way yum imports the sigs?
> poldek - no.
> rpm - yes.
> yum - no idea what it does wit keys.
>
But I was just told to forget about yum and use poldek.
If poldek does not have a way to import these sigs,
and yum is not  used for updates because apparently there
is not pld.repo file , then how could poldek verify the authenticity
of the packages it downloads?