SHA Hashes should be provided with any down loads. It would provide validation of any downloads provided.