I had received a bad comment about my project but without any explanation. If you too think this idea is bad, please tell me why.
This system tries to avoid software publishers' cooperation with some governments e.g. Mozilla and China for spying Chinese citizens, (countries without independent security audit firms.)
The goal is to have universal identical downloads.
It consists of a download manager that sends download titles to a server and asks for checksum. That server sends checksum as reported by users from other countries. Queries can be by specifying version or just asking for the last version.
A concern would be if this server also can be purchased by goverments. So the download manager keeps a list of checksum of all downloaded software and it can later check this list by server through different proxies. There is a chance that some of the popular proxies will be betraying and reveals user location to the server so this is for addressing that, too. Also a client download manager can download the whole database and compare it when a query is done through different proxies.
The download manager checksum log is not allowed to be manipulated by other application.
Also a need in western countries, too, because with the cooperation of telecom companies software publisher can know if an IT company is downloading or ordinary user which cannot detect an unknown spyware
This system can also be P2P but without a fully decentralized protocol, it doesn't make any effect in being lobby-proof.
(if you liked it I started a fundrazr.com project for it)