On Sat, 21 Dec 2024 at 08:32:12 +0000, Sunny73Cr wrote: >> Is that theoretic or are you saying the mirror tampered with the >> download? > > Theoretical
You can compare the checksums against the values from the .mirrorlist URL. And/or verify the detached PGP signature on the downloaded file. Both are served directly by The Document Foundation's server not via mirror redirection. -- Guilhem. -- To unsubscribe e-mail to: [email protected] Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.documentfoundation.org/www/mirrors/ Privacy Policy: https://www.documentfoundation.org/privacy
