Side-note: please don't publish checksums over unencrypted channels, and please don't use MD5 for image checksums. Technically, it's no problem if the intended

Side-note: please don't publish checksums over unencrypted channels, and please don't use MD5 for image checksums. Technically, it's no problem if the intended use-case is not to verify against tampering but against transmission errors. However, it's a fine line that people easily cross by accident. It helps with global education if we condition people to never accept checksums from unencrypted sources, and to be wary of MD5.