Why not download both from zap.store instead? The Amber release for example is signed by the developer himself. We hope to do the same for 0xchat soon