But no pgp verification? Where do you get the "good" checksum to compare against?
Nm I'm an idiot and conflated checksum with hash. So no verification?