[GNU-linux-libre] Help users to verify their downloads

[Donald Robertson]

Hello all,

We've recently received some feedback from users concerned about
verifying their downloads of free distros. They want to make sure that
what they've downloaded is actually the distro, and not something that
has been modified in some way. Some distros already provide ways for
users to check their downloads, but it isn't universal. I know Trisquel
provides md5, sha1, sha256, and gpg for their users to verify downloads,
and I think it is a good practice for every distro. Could I get help in
checking what other distros are providing for this issue, and working to
encourage all distros to provide such options? Thank you all for any
help you can provide, and let me know if you have any questions.
-- 
Donald R. Robertson, III, J.D.
Licensing & Compliance Manager
Free Software Foundation
51 Franklin Street, Fifth Floor
Boston, MA 02110
Phone +1-617-542-5942
Fax +1-617-542-2652 ex. 56