This issue came up a few moments ago on #debian-user IRC.
The CD FAQ page has a section on verifying CD images, but doesn't link
to the actual MD5sum file. Links from the Network Install page are to
specific ISO images an not the download directory. This is causing
confusion for people looking for an MD5SUMs file.
http://www.nl.debian.org/CD/faq/
http://www.nl.debian.org/CD/netinst/
Suggestion: add an explicit link to the MD5SUMS and MD5SUMS.sign files
on both of these pages:
http://cdimage.debian.org/debian-cd/3.1_r0a/i386/iso-cd/MD5SUMS
http://cdimage.debian.org/debian-cd/3.1_r0a/i386/iso-cd/MD5SUMS.sign
For the FAQ, I would suggest making the word "MD5SUMS" a link, in the
following sentence, and adding the sentence "Verify the md5sums with the
[link: MD5SUMS.sign] file." immediately following.
To ensure that the images were not only downloaded correctly, but
are indeed official images, you also have to verify the GnuPG
signature on the [link: MD5SUMS] files using the Debian GPG keyring.
CD vendors are encouraged to do this.
Peace.
--
Karsten M. Self <kmself@ix.netcom.com> http://kmself.home.netcom.com/
What Part of "Gestalt" don't you understand?
Compaq thin[k]s they can distribute our OS [software] however they want.
Joachim, you'll need to check the contract on this. If they think they can
distribute however they want, again, it's a small step to putting other os
software on the cd rom.
- Brad Silverberg, Microsoft Corp, Oct 1, 1993. Taking care of business
Attachment:
signature.asc
Description: Digital signature