Gentoo install not using package signatures ?

[el muchacho]

As far as I can tell, checking the package's integrity is not done through the installation of Gentoo. I can't see that we add the "FEATURES" options to make.conf nor have the public key to check that packages were signed.

Is it really the case or I am missing something ?

[Apheus]

If you want complete checking, use webrsync with webrsync-gpg feature. The snapshot is signed with a key in Gentoo's control, and contains the manifest files with checksums. Portage checks downloads and distfiles with these checksums whenever something is fetched or unpacked.

Pulling validated snapshots