add some documentation to the user section about establishing trust

[monkeysphere.git] / website / download.mdwn

diff --git a/website/download.mdwn b/website/download.mdwn
index cc83adfabb71b6e250ed85f33512595b2b995b7c..3ba40f4e37440a8bb0c0247e1ff2a97eabfdf1ae 100644 (file)
--- a/website/download.mdwn
+++ b/website/download.mdwn
@@ -1,6 +1,6 @@
 [[meta title="Download"]]
 
-## Downloading and Installing ##
+# Downloading and Installing #
 
 If you are running a Debian system, you can install Monkeysphere
 by following these directions:
@@ -30,10 +30,53 @@ system is that lenny's GnuTLS can't support the `monkeysphere
 subkey-to-ssh-agent` subcommand.
 
 You can install a patched version of GnuTLS to enable this feature of
-the MonkeySphere by adjusting the monkeysphere `sources.list` lines to
+the Monkeysphere by adjusting the monkeysphere `sources.list` lines to
 include the `gnutls` component.  So they'd look like this instead:
 
        deb http://archive.monkeysphere.info/debian experimental monkeysphere gnutls
        deb-src http://archive.monkeysphere.info/debian experimental monkeysphere gnutls
 
 You can [read more about this offering](/news/modified-gnutls-2.4.x-available).
+
+## Source ##
+
+For people who can't use the debian package, or folks who just want to
+look at the source, we recommend [using git](/community).
+
+But if you want a tarball of the most recent release, we publish those
+too.  The [latest
+tarball](http://archive.monkeysphere.info/debian/pool/monkeysphere/m/monkeysphere/monkeysphere_0.14.orig.tar.gz)
+has these checksums:
+
+<pre>
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
+checksums for the monkeysphere 0.15 release:
+
+MD5:
+8be275e5b5119921a536d8a67d3bfe24  monkeysphere_0.15.orig.tar.gz
+
+SHA1:
+65da0a047d935e856e2a0d7032dbbb339a3ce20a  monkeysphere_0.15.orig.tar.gz
+
+SHA256:
+44f3feb6e9f6921d2ed0406af4e3862f67da9261c8f00c7ea37cfea5031cbc77  monkeysphere_0.15.orig.tar.gz
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.9 (GNU/Linux)
+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+=AmW6
+-----END PGP SIGNATURE-----
+</pre>