Downloads from Apache - Use case

Suppose you are downloading say Axis2-1.3 from Apache. You are supposed to get the actual bits from a mirror:
http://mirror.x10.com/mirror/apache/ws/axis2/1_3/axis2-1.3-bin.zip

And the actual MD5 and ASC files from here:
http://www.apache.org/dist/ws/axis2/1_3/axis2-1.3-bin.zip.md5 http://www.apache.org/dist/ws/axis2/1_3/axis2-1.3-bin.zip.asc

Dumb Question is, Is it possible to automagically convey this information on the wire, such that one can write an apache module / greasemonkey+firefox stuff to allow the user to start downloading the file via GET and confirm the integrity of the bits using MD5 hash and/or checking the signature the person who signed the code using some GPG/PGP on the client side.

Is this a good plausible scenario to look at?


About this entry