Add signing to SailfishOS SDK [answered]

Do you consider it impossible for sailfishos.org to be hacked into? :)

I would feel better if there would be a PGP signature included from an "official" Jolla/Sailfish key, created from a more secure internal machine during the release process. I'm in security and it would be somewhat embarrassing if something were to happen to my own laptop because of installing an unsigned binary, not to mention the mess created if my SDK-generated binaries would themselves spread malware to anyone using my compiled code.

Unless distributed out-of-band, a checksum is useless as anybody who can modify the binary, can also modify the provided checksum.