which software is downloaded is, in fact, a valid supplier site) is beginning to
be addressed through authentication of download channels and through code
signatures using certificates issued by trusted certification authorities.
8.18 Software Assurance Initiatives