Received: from sog-mx-1.v43.ch3.sourceforge.com ([172.29.43.191]
	helo=mx.sourceforge.net)
	by sfs-ml-3.v29.ch3.sourceforge.com with esmtp (Exim 4.76)
	(envelope-from <webmaster@recessionstories.net>) id 1UBsjX-0003bQ-0D
	for bitcoin-development@lists.sourceforge.net;
	Sat, 02 Mar 2013 20:08:39 +0000
X-ACL-Warn: 
Received: from mailout61.mail01.mtsvc.net ([216.70.64.9])
	by sog-mx-1.v43.ch3.sourceforge.com with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.76) id 1UBsjW-00061Q-5f
	for bitcoin-development@lists.sourceforge.net;
	Sat, 02 Mar 2013 20:08:38 +0000
Received: from mailout34.mail01.mtsvc.net ([216.70.64.74]
	helo=n25.mail01.mtsvc.net)
	by mailout61.mail01.mtsvc.net with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.72) (envelope-from <webmaster@recessionstories.net>)
	id 1UBsHp-0001rC-AD for bitcoin-development@lists.sourceforge.net;
	Sat, 02 Mar 2013 14:40:01 -0500
Received: from 173-160-184-33-washington.hfc.comcastbusiness.net
	([173.160.184.33]:59034 helo=localhost.localdomain)
	by n25.mail01.mtsvc.net with esmtpsa (TLSv1:AES256-SHA:256)
	(Exim 4.72) (envelope-from <webmaster@recessionstories.net>)
	id 1UBsHj-0006gR-DU for bitcoin-development@lists.sourceforge.net;
	Sat, 02 Mar 2013 14:39:55 -0500
Message-ID: <5132558A.8040304@recessionstories.net>
Date: Sat, 02 Mar 2013 11:39:54 -0800
From: webmaster <webmaster@recessionstories.net>
User-Agent: Mozilla/5.0 (X11; Linux i686;
	rv:10.0.12) Gecko/20130110 Thunderbird/10.0.12
MIME-Version: 1.0
To: bitcoin list <bitcoin-development@lists.sourceforge.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Authenticated-User: 885636 webmaster@recessionstories.net
X-MT-INTERNAL-ID: da77627cc1395e032ff4383e87b3e98abde298c2
X-Spam-Score: 0.0 (/)
X-Spam-Report: Spam Filtering performed by mx.sourceforge.net.
	See http://spamassassin.org/tag/ for more details.
X-Headers-End: 1UBsjW-00061Q-5f
Subject: [Bitcoin-development] Secure download
X-BeenThere: bitcoin-development@lists.sourceforge.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <bitcoin-development.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=bitcoin-development>
List-Post: <mailto:bitcoin-development@lists.sourceforge.net>
List-Help: <mailto:bitcoin-development-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=subscribe>
X-List-Received-Date: Sat, 02 Mar 2013 20:08:39 -0000

Hi,

I am a newbie trying to get my first wallet up.  But I have a 
security/crypto background and so I know enough not to trust a http 
download.  But I don't see any other option to download bitcoin software 
from sourceforge.

I can check the SHA256 hashes, but how do I verify those?

I am familiar with gpg.  Where can I find signatures and the signing 
keys?  Hopefully, the keys are on multiple independent servers.

Or is read-only ssh/sftp/scp access possible?

Thanks in advance,

Chris