with curl | sh you could use a checksum you download with curl!