Sign your releases with the SSH key you already have

W3BS packages can now be signed by their publishers with plain OpenSSH, bound to their domain and checked before any installer runs.

Read the original (By Anthony Ettinger, via Chovy's Blog): https://dev.profullstack.com/~anthony/blog/263-post.html