The signature for the sha256sum.txt file in 4.5a4 is broken
17:40 < Patrick> wget https://dist.torproject.org/torbrowser/4.5a4/sha256sums.txt.asc 17:40 < Patrick> wget https://dist.torproject.org/torbrowser/4.5a4/sha256sums.txt 17:40 < Patrick> gpg --verify sha256sums.txt.asc 17:40 < Patrick> gpg: Signature made Wed 25 Feb 2015 07:58:21 AM UTC using RSA key ID F65C2036 17:40 < Patrick> gpg: BAD signature from "Tor Browser Developers (signing key) torbrowser@torproject.org" [unknown]