[sleepychu]

So the signature gives you confidence because you trust the signatory?

[rocqua]

Yes, or more specifically, because I trust the keys published by the developers are controlled only by the developers, and because I trust the developers to compile correctly.