(easy to solve) Use https for a connection
Dear poppler people :-),
When security-conscious persons go to https://poppler.freedesktop.org/ they see "The tarball has been signed (.sig file) by Albert Astals Cid CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7" but when they click on the CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7 link... they see a crossed out padlock in the address bar. That leaves them doubting.
What about adding a "https://" to the destination address? That way there's no crossed out padlock and everything seems to be right.