Hmm... I do: - https://www.debian.org/ https://www.debian.org/ - Click "Getting Debian"... - https://www.debian.org/distrib/ https://www.debian.org/distrib/

Hmm... I do: - https://www.debian.org/ https://www.debian.org/ - Click "Getting Debian"... - https://www.debian.org/distrib/ https://www.debian.org/distrib/ (no signatures, no checksums, no "verify" link) - Click "Download an installation image"... - https://www.debian.org/distrib/netinst https://www.debian.org/distrib/netinst (no signatures, no checksums, no "verify" link) - Click on my architecture, the ISO download starts - The file is now on my machine and I have not seen the words "signature", "GPG", "checksum", or "verify" anywhere. I eventually found https://www.debian.org/CD/verify https://www.debian.org/CD/verify using a Google search. It's safe to say there is room for improvement here.