It is a system for alerting about governments national spyware. This system tries to avoid software publishers' cooperation with some governments e.g. Mozilla and China for spying Chinese citizens, (countries without independent security audit firms.). It makes software authors and some governments deals a risky business

Goal is to having universal identical downloads.

It consists from a download manager that send download titles to a server and ask for checksum. That server sends checksum as reported by users from other countries. Queries can be by specifying version or just asking for last version checksum

A concern would be if this server also can be purchased by governments. There is also a chance that some of the VPN or proxies will be betraying and reveals user location to the participating authors or checksum server. For addressing these the download manager keep a list of checksum of all downloaded software and it can later checks this list by server through different proxies. When user connect to a new vpn (or proxy) the download manager check all previously downloads through it. Also a client download manager can download whole database and compare it when query is done through different proxies. So if they want to do it they had purchased all VPN offer real IP.

Even a block-chain version of this database would need these measurements because some problems in current P2P networks. (some jobs has done for decentralised bootstraping)

What about download manager app itself? The users should do above checks manually itself. But if he/she purchased device in a democratic country he can download the app there.

Important job that this system do is making such certainly illegal deals (cooperation of publishers (or VPNs) with bad govs) at so much risk of being revealed.

The download manger checksum log is not allowed to be manipulated by other application

Also it's a need in west countries, too because with cooperation of telecom companies software publisher they can know if a IT company is downloading a software or ordinary user which cannot detect an unknown spyware

Hash Database