Methods

Use PGP signed archives
MD5 identified archives rare
no method to detect alterations in plain archives
Identify signed archives
used Google, generic search terms
weeded list down to 166 unique servers, 2804 archives
Build a tool to autocheck
based on 'extract-0.1'
Download archives
Check
Post-process the data