@malwareminigun @marcan this is not true if the server is offering up a binary signed by the distributor.