Joshua Judson Rosen (rozzin)'s status on Monday, 03-Nov-2014 00:09:40 EST: @lnxw48, if you can verify via #crypto the #goodguy #identity of the file-provider and/or file, address doesn't really matter. That's what makes using mirrors of signed packages viable.