I am concerned about the possibility to download a fake keepass upgrade.
If possible this would allow many ways to get private data on keepass files!
For example, keepass hacked or modified code could send the kbdx file by ftp to a server in China or in Crimea! Or hacked keepass could send the kbdx file attached in email in a thank you note to keepass developers...
Is this possible?