Comment 2 for bug 541565

Well, since we would always define the download url by hand, some sort of checksum could be added too. Either the TTH hash of the current installer or something similar.
If the hashes don't match, the client would announce a warning that something went wrong during the download so try again later or visit the download page.