Dear Pidgin-Maintainer(s) I'd like to ask for the distribution of official PGP-signatures together with the (binary) downloads. This is how you can create a signature using GnuPG and a valid key-pair: gpg -a --detach-sig pidgin-2.1.0.exe Others can check the download with: gpg --verify pidgin-2.1.0.exe.asc pidgin-2.1.0.exe regards, Sven