How Do You Know That Download Is Safe? Checksums, GPG, and File Integrity Explained.
Downloading a file and running it is an act of trust. Checksums prove the file wasn't corrupted. GPG signatures prove who sent it. Here is how to verify both, from first principles.