Hacker News Reader

> why not always use a VPN?

Because then you're susceptible to remote MITM? VPNs are useful but do not replace end-to-end encryption.

That's why I qualified it with local. Have anything to say about checksums too?

A checksum that's published via HTTP doesn't protect you against MITM.