Re: [Trisquel-users] Insecure download

[lamefun . x0r]

MD5 is completely useless if you don't get it from a trusted source.
GPG signature is only useful if you have already gotten the public key to  
verify it against, again from a trusted source.