ignore this post, I missed that we are talking about the LTC electrum variant. Thanks Abdussamad
how can i verify the file "Electrum-LTC-2.6.4.2.tar.gz" downloaded from electrum-ltc.org ?
its sha256sum is only listed on the site itself and nowhere else on the web.
The sha256sum file is signed with the devs pgp key.
https://pgp.mit.edu/pks/lookup?op=vindex&search=0x2BD5824B7F9470E6