Hi,
i tried to download the deb-file and the tar.gz-file und verify the signature with gpg. I only got “Bad Signature” Messages. It looks like the wrong sig-files are linked on the Sublimetext download page.
Page:
https://www.sublimetext.com/download#direct-downloads
Example, download-Link for the deb:
https://download.sublimetext.com/sublime-text_build-4126_amd64.deb
Public key link:
https://download.sublimetext.com/sublimehq-pub.gpg
Signature file link:
https://download.sublimetext.com/sublime-merge_build-2074_amd64.deb.sig
I think the signature file is somehow mixed up with Sublime Merge.
So i changed the download link of the sig file to this:
https://download.sublimetext.com/sublime-text_build-4126_amd64.deb.sig
and was able to verify the download with a good signature.
The other sig file links look wrong, too.