Verifying installers is something critical for avoiding malware that few people do. It's not hard at all, and this video shows you how to do it in just about 2 minutes.

Bisq installer files are currently built and signed by Christoph Atteneder (ripcurlx). His public key ID is 29CDFD3B and fingerprint is CB36 D7D2 EBB2 E35D 9B75 500B CD5D C1C5 29CD FD3B, which you can verify through commits on GitHub (https://github.com/bisq-network/bisq/...) and on Keybase (https://keybase.io/ripcurlx).

(Royalty-free music from bensound.com)