They provide gpg signed sha hashes, it's apparently just not documented: https://micahflee.com/2016/02/backdoored-linux-mint-and-the-perils-of-checksums/ https

They provide gpg signed sha hashes, it's apparently just not documented: https://micahflee.com/2016/02/backdoored-linux-mint-and-the-perils-of-checksums/ https://micahflee.com/2016/02/backdoored-linux-mint-and-the-...