This. In my limited experience, HTTP MITM doesn't really happen. I'm sure TLS is quite fast on reasonably modern magic rocks, but for things like distribution I

This. In my limited experience, HTTP MITM doesn't really happen. I'm sure TLS is quite fast on reasonably modern magic rocks, but for things like distribution ISOs I prefer to download only checksums over HTTPS.