3 ms·NB, the tarballs have detached OpenPGP signatures, you should probably use them for verifying authenticity.by jwilk 9y agoNB, the tarballs have detached OpenPGP signatures, you should probably use them for verifying authenticity.