Even if packages were signed and I could verify all of them, I still don't think it's the NSA's business which packages I've requested from ELPA.  It would be nice if ELPA were available over TLS to provide both an additional level of security, and to provide an interim solution while we are waiting for package signing.