Karsten W Rohrbach's dashboard

If you build your packages using the standard Debian process it even auto-signs your freshly created package set. You just have to enter the passphrase for the package signing key. It was designed specifically to be easy for the developers to sign their packages.

And, yes, package integrity is a big plus. You do not sign, so tampering on the distribution site will go unnoticed. Mass rollout of a modified program version willl go unnoticed. Miro is a software with full network access, so it would pose a strategic target if the installed base is big enough.

Please add package signing. It is worth the effort. Thank you.