> 1. supporting gpg/x509 signatures detached from repomd.xml on each repo > - so we can check the content for validity Is sqlite repo-data still on your list or have you changed your mind on this? regards, Florian La Roche