All the ZeroNet forks and releases should be signed

I can't believe in the day of state MITM that ZeroNet ships unsigned releases or binaries - they all should be signed with an originator's key.

That includes the releases on zeronet.io

Forkers - pleases get an openpgp key and put a link to your keys in your READMEs then sign your releases.

The issue names releases on zeronet.io, fork READMEs, binaries, and OpenPGP keys, but no repository files or tests. Start by mapping how releases are produced and published, then define the signing scope and verification path; done means the agreed releases and fork guidance are covered.

Written by the indexing model from the issue text.