fwarren writes "One of the main complaints heard around here on why some slashdotters don't run Arch Linux is that the packages are not signed. Fear no more. Arch Linux and pacman now allow for package signing." Link to Original Source
I'd rather just believe that it's done by little elves running around.