During and after my upgade to ascii,
when I try to install packages
I consistently get messages like

WARNING: The following packages cannot be authenticated!
lighttpd
Install these packages without verification? [y/N]

Is there something wrong with pakage signing?
My apt-sources are from pkgmaster.devuan.org,
and I did install the devuan-keyring, version 2017.10.03.
Aptitude doesn't seem to think there's a newer version.

-- hendrik