https://issues.dlang.org/show_bug.cgi?id=16065 --- Comment #1 from Sobirari Muhomori <dfj1esp02 at sneakemail.com> --- Signature on binaries can be forged in the same way: obtain a valid certificate with a similar CN and use it. --