[Request] Signed Releases

[jacksgt]

Hi @geommer ,

to verify the integrity of the code it would be great if you signed your releases with git (especially for distribution packaging).

Assuming you already have a PGP key this can simply be done by appending '-s' to 'git tag':

git tag -s -m '0.5.0' [...]

The only left to do then is share your PGP key on a keyserver and put the fingerprint (e.g.) into the README.md