boredsquirrel, 11 days ago

If the hash and the binary come from the same download location, how does this improve anything?

Also always nice is when there is a PGP signature but the key cannot be found anywhere.