Karl Kleinpaste <karl(a)justresearch.com> writes in xemacs-beta(a)xemacs.org:
...
For the moment, is there a way merely to tell the package manager
not
to bother with PGP verifications?
No. It depends upon which version of the package-index file you are
using. You can either strip out the signature, or update to the most
recent package-index file on the FTP site (which includes a pointer to
an updated version of the mailcrypt package).