[sf-lug] check release signatures

[Alex Kleider]

In a recent posting Rick has strongly advocated that one "check release signatures" of distro downloads.
Perhaps he or someone else would be kind enough to point to a place (a "HOWTO" for example) where one can learn how to do this.  I've previously assumed if one checks the 'checksum' all is well but Rick warns that this is not so (and his arguments certainly make sense, at least to me.) TIA
Alex