apt-get install tor && torify wget http://path.to/file
And how did you verify the trust path for your initial debian install
It is easy enough for me, nearly impossible for regular users.
FYI, there was recently an interesting thread on the OSS-Security list
on this topic:
Subject: upstream source code authenticity checking
http://comments.gmane.org/gmane.comp.security.oss.general/9989
http://www.openwall.com/lists/oss-security/2013/04/20/4
--
Too many emails? Unsubscribe, change to digest, or change password by emailing
moderator at [email protected] or changing your settings at
https://mailman.stanford.edu/mailman/listinfo/liberationtech