How is this different from publishing the pgp signed sha for the digital file, which is an inherent property of the file?
For example, how Ububtu authenticates its Linux installers, https://ubuntu.com/tutorials/how-to-verify-ubuntu#1-overview
For example, how Ububtu authenticates its Linux installers, https://ubuntu.com/tutorials/how-to-verify-ubuntu#1-overview
Consensus of something completely different than the element you are trusting with the web of trust, so ... basically ... blockchain is better because it does not address the problem at all but instead solves a problem that does not even exist in PGP? Or what is it exactly that you are saying?