Wow, both of you managed to avoid my actual question. :) On Thu, 30 Nov 2017 13:00:07 +0100 kardan <kardan at riseup.net> wrote: > How can I verify those downloads with shasum or gpg fingerprints)? > (FTP and HTTP seem not to be the safest ways these days.) Kardan