We don't publish SHA checksums of binaries

[buep]

to protect against MiM attacks during downloads.

[groenborg]

The checksums are handled by the packagemenagers scoop and brew. From our little talk in the office we cleared that they should be published. I suggest we do this as a part of our release to GitHub and write it in our release notes