Earlier quoted context omitted.
An integrity check is better than nothing, but yes it says nothing about its authenticity.
You can use this site https://distro.ibiblio.org/tinycorelinux/downloads.html And all the files are here https://distro.ibiblio.org/tinycorelinux/16.x/x86/release/ Under a HTTPS connection. I am not at a terminal to check the cert with OpenSSL. I don’t see any way to check the hash OOB Also this same thing came up a few years ago https://www.linuxquestions.org/questions/linux-newbie-8/reli...
> this same thing came up a few years ago
Honestly, that makes this inexcusable. There are numerous SSL providers available for free, and if that’s antithetical to them, they can use a self signed certificate and provide an alternative method of verification (e.g. via mailing list). The fact they don’t take this seriously means there is 0 chance I would install it!
Honestly, this is a great use for a blockchain…