Hacker News Reader

Are ya'll going to post a SHA checksum for the downloadable dmg alongside the download?

Probably not. It's a TLS connection -- if someone can lie about the contents of the DMG, they can lie about the hash too. How would it help?