Re: [Trisquel-users] Julian Assange: Debian Is Owned By The NSA

[legimet . calc]

Even if you trust Ruben completely, Trisquel does not rebuild many of the  
packages from Ubuntu.

For example, apt-cache show openssl gives a checksum for the latest deb of  
843af273766056f25469e9915ddd2567. Compare that with what's here.

So you have to trust upstream as well.