I love these sorts of hacks. In fact I did something similar with a project called rget[1] two thoughts: 1. My project got politely asked to not use the ct log

I love these sorts of hacks. In fact I did something similar with a project called rget[1] two thoughts: 1. My project got politely asked to not use the ct log and lets encrypt infra this way. Since you are only doing it every 12 hours you might be ok. 2. Sigstore[2] seems like it might be a good match and their infra is designed for lots of small fast one off sigs. [1]: https://merklecounty.substack.com/p/rget-a-secure-download-user-story https://merklecounty.substack.com/p/rget-a-secure-download-u... [2]: https://sigstore.dev https://sigstore.dev