3 ms·
Heh, kinda amusing to claim you can verify the ISO, then to verify you post 3 URLs that are easy to MiTM because they are not using HTTPS. For those that care
by sliken 10y ago
Heh, kinda amusing to claim you can verify the ISO, then to verify you post 3 URLs that are easy to MiTM because they are not using HTTPS.
For those that care I suggest:
https://help.ubuntu.com/community/VerifyIsoHowto https://help.ubuntu.com/community/VerifyIsoHowto
It's over HTTPs, and mentions both the short finger prints (0xFBB75451 and 0xEFE21092) as well as the full finger prints (C598 6B4F 1257 FFA8 6632 CBA7 4618 1433 FBB7 5451 and 8439 38DF 228D 22F7 B374 2BC0 D94A A3F0 EFE2 1092).
- oliwarner 10y agoThe hash-GPGs are securely verifiable. The community wiki page is editable. Obvious issues there.