Talk:FIPS Warnings and Cautions
Distribution from Snail Mail CD
"You must use a source distribution file from an official snail-mailed CD."
I understood it to be the case that you CAN download it, but if you do you MUST verify the HMAC-SHA-1 digest with an independantly validated FIPS 140-2 product. Getting access to such a product may be very difficult for most people!!