Add link to "Contour: A Practical System for Binary Transparency" paper

[andrew]

Another possible area that IPFS could help support is making it easy to check if the packages you've downloaded are infact what the publisher intended, with bonus points for using IPFS hashes so you can also make effective logs of every package available via IPFS at the same time.