A noob question.  When I started to update from the development tree, I found I had to set gpgcheck=0 in yum.conf.  According to

http://forums.fedoraforum.org/showthread.php?t=51610

"Yes, all non-development tree packages coming out of Redhat should be signed, that goes for FC4 final."

Does this imply that all development tree packages are NOT signed, and thus that gpgcheck=0 is necessary?  Feels a tad scary.  Can one check signatures using a different system like APT instead of Yum, for example?

/Mike