Missing checksums for 16.04 network install media
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ubuntu-website-content |
New
|
Undecided
|
Unassigned |
Bug Description
When I choose network install in the alternative downloads section on the ubuntu home page, I get forwarded to
http://
Note that this is a http link, so the download is untrusted at this point.
I can't find trustworthy checksums which available via https on a page from ubuntu.
The checksums of the iso I downloaded are:
md5sum mini.iso
f48aa34ecb041be
thomas@
66177d7cecfa0eb
thomas@
b7d0d22eb0f5aab
Note that I got forwarded to ...dists/
I can also see different keys here:
https:/
http://
But I had problems with that version, which is why I want to give the iso from xenial-updates a try.
Please always make at least sha2 and sha256 checksums available for all media downloads.
The checksums must be provided via https on a domain ending with ubuntu.com. Everything else may NOT be considered trustworthy by users.
Related: #1534967
affects: | btrfs-tools (Ubuntu) → ubuntu-website-content |