Signed downloads

[Decoherent]

Downloading an executable file from the internet and running it as root is a little unnerving. Would you be willing/interested in having signatures available? Debian's method seems the easiest; they have a checksum file in the assets list with all the files for that version, and just sign the checksum file.

[Mikescher]

I mean you can simply compile it from source, or use the AUR package :D

But how do you think those signatures would look in practice?
I guess having a checksum file in the github release would be feasible - do you know a project which currently does something similar? For me as a reference.

I can't promise, that this will have a hight priority, but I can look into it.