Do you use GnuPG?
cperciva: I use GPG to sign the hashes on tarsnap source code tarballs -- without that, tarsnap users would have to trust that my SSL server was feeding them the right bits.I also sign security advisories and patches while wearing my FreeBSD Security Officer hat.