Hi, > The installer currently downloads the zip or tar.gz from dist/mirror and > then downloads the md5 from dist.
How does that work on linux? You assuming that the install script can't do a MD5 check and they must do it manually? > it runs the script, which might choose to checksum any otherdownloads. How it that possible to release unless you modify the installer files after you vote and deploy? Justin