Comment Re:Wrong Paradigm (Score 1) 623
The same way you would authenticate the provider of the source tarball. Ideally they will be downloaded from the same server.
If Trustworthy Tim doesn't want to use autopackage, you - as a user of his software - will have to convince him.