The only way I can install majority of packages without rejection from signature database is to put
SigLevel = Never in
Its not supposed to be the right way, but I don't seem to be able to get pacman going any other options for SigLevel.
Is what I'm doing right? And is it a frequent and common security threat that I should worry about, every second, day and night?