If we are going with https and security way, what about IMAGE_TRUST_CMD? It may allow verifying images downloaded by http/https. Although I don't know whether it is enabled by default.

View Change

To view, visit change 31086. To unsubscribe, or for help writing mail filters, visit settings.