[liberationtech] secure download tool - doesn't exist?!?

[Blibbet]

>>> apt-get install tor && torify wget http://path.to/file
>>
>> And how did you verify the trust path for your initial debian install
>
> It is easy enough for me, nearly impossible for regular users.

FYI, there was recently an interesting thread on the OSS-Security list 
on this topic:

Subject: upstream source code authenticity checking
http://comments.gmane.org/gmane.comp.security.oss.general/9989
http://www.openwall.com/lists/oss-security/2013/04/20/4