You can e-mail me at this address.
It’s a strange e-mail address, I know, but it’s the one with all the spam filters pointed at it.
Binary releases are signed by me personally using minisign, a tool to sign files and verify their signatures.
The public key is on the right.
untrusted comment: minisign public key 19665A138C9AD55E RWRe1ZqME1pmGXTRr9OJglWmrl5taVWP8Tbc6Do0Yb5fjF8zPQ8a9dRx