Hi, A tiny first step: I added sha256 chechsums for all downloads created by the Pharo6 build process https://ci.inria.fr/pharo/ <https://ci.inria.fr/pharo/> This step: https://ci.inria.fr/pharo/job/Pharo-6.0-Update-Step-5-Publish/ <https://ci.inria.fr/pharo/job/Pharo-6.0-Update-Step-5-Publish/> now creates .sha256.txt files, e.g for the mac: https://ci.inria.fr/pharo/job/Pharo-6.0-Update-Step-5-Publish/lastSuccessful... <https://ci.inria.fr/pharo/job/Pharo-6.0-Update-Step-5-Publish/lastSuccessful...> This allows to check that downloads from the file server are indeed the same files that the build server created. http://files.pharo.org/platform/ <http://files.pharo.org/platform/> http://files.pharo.org/image/60/ <http://files.pharo.org/image/60/> As I said, just a very first step. TODO: - pgp signatures - insert into website - SSL for files.pharo.org <http://files.pharo.org/> - do it Pharo7 - â¦. So: more to come! Marcus