Matthew: the users in question obviously didn't notice MD5SUMS.gpg right alongside MD5SUMS, which (if you care enough to check it) is probably considerably more secure than HTTPS certificates. Who ever bothers to check the full HTTPS certificate chain?
Matthew: the users in question obviously didn't notice MD5SUMS.gpg right alongside MD5SUMS, which (if you care enough to check it) is probably considerably more secure than HTTPS certificates. Who ever bothers to check the full HTTPS certificate chain?