The recommended download site http://jackaudio.org/downloads/ suffers from these problems: * It is http:// making it vulnerable to MITM attacks. * It doesn't provide tarball fingerprints (md5 or sha256) I recommend you discontinue it, and just use GitHub instead. A lot of projects do this successfully. GitHub is already usable this way. Yuri