Hello, I am analyzing the code of libzypp and found RpmDb::checkPackage has never been used. So, I think libzypp have not do digest/signature check before installing packages, right? Is it by design, or missing? I think it's necessary. -- Best regards, Zhang Qiang MeeGo Team, Open source Technology Center, SSG, Intel