Feature Request: optional checksum verification

[jqnatividad]

For additional security/peace of mind, it'd be great if self-update can check a release's checksum when its available, and only continue with the update if the checksum is verified.

[jaemk]

Yes, definitely would be a good addition!

[simonsan]

Can there be some insight, why zipsign has been used instead of for example minisign/rsign2 which cargo-binstall uses: https://github.com/cargo-bins/cargo-binstall/blob/main/SIGNING.md

Using zipsign means, that we would need to attach various different signatures to releases it seems, which is a bit unfortunate I would say instead of having a kind of standardized signing process.