https://noncombatant.org/2014/03/03/downloading-software-safely-is-nearly-impossible/
Just found it. What do you reckon?