and the checksum verification page also still doesn't ask the user to use gpg, so it's still MITMable.
and the checksum verification page also still doesn't ask the user to use gpg, so it's still MITMable.