I'm maintaining some FreeSWITCH packages for Arch. If PGP signatures are available for source tarballs, the build system can use them to verify authenticity automatically. Would you be interested in producing a PGP .sig/.sign/.asc file alongside the release tarballs going forward? http://files.freeswitch.org/releases/freeswitch/ Thanks, David