Signed by who/what, though. There's the rub.

Look at software distribution, today, on the OSs that most people use for the likely outcome.