September 25, 2026
Sparkle signs each update with an EdDSA private key kept in your login Keychain, and every installed copy checks that signature against the public key in its Info.plist before installing anything.