From the dawn of time the zypper provider has skipped GPG checks. OpenSuSE
users, is there a reason for this? There’s a proposal to switch this to use
GPG checks by default [over time].
We want to work toward changing this but need to know if it is common to
have repositories for Zypper that are not signed.
http://tickets.opscode.com/browse/CHEF-3938
Bryan