http://electrumjrofclo7spm6qnhi5to3ysdtlborgbtvpuoanpxh3ypegpad.onion
(Note that an attacker would be
able to create valid hashes, this is why we do not publish hashes
of our binaries here, it does not bring any security). In order to be able to verify GPG signatures, you need to import
the public key of the signer. Electrum binaries are signed with
ThomasV's public
key .