[zcdziura]

Just curious: how does one do that? Hash both the binary and source code files, that THAT hash, then sign it? Or am I completely off?