Feathercoin client authenticity

[A Former User]

Hello all!

I am probably missing something obvious, but, at the risk of looking a fool, I need to ask the question.

I wonder why Feathercoin wallet download page is not X.509 authenticated.
First, at the client download page, I can’t find any hash to authenticate my newly downloaded client (bitcoin has that), but even if there was a hash to compare with, as the webpage is not authenticated, it could well be a poisoned one to go with the poisoned client. (Bitcoin site isn’t authenticated either, so this attack would be possible)

So again, I believe that I am missing something, but can someone explain to me what makes it impossible for Mallory (placeholder name) to deface/redirect via DNSp the site, put in her own client download link (providing payment addresses owned by her for example).

Thanks a lot.