checksum files are not signed what gives?

To: debian-cd@lists.debian.org
Subject: checksum files are not signed what gives?
From: Steve K <strangerland@gmail.com>
Date: Wed, 6 Jul 2016 14:33:26 -0400
Message-id: <[🔎] CAECx-3-P3YQfEBY7TbZcF2pYkWMhZrBpB5F1F9+tK+8C486=jg@mail.gmail.com>

SHA512SUMS for instance is not signed so whats the point of SHA512SUMS.sign

I'm on page http://cdimage.debian.org/debian-cd/8.5.0/amd64/bt-dvd/ which is not https

this is all hokey -- MITM?

-Steve

Reply to:

Follow-Ups:
- Re: checksum files are not signed what gives?
  - From: Steve McIntyre <steve@einval.com>
- Re: checksum files are not signed what gives?
  - From: Neil Williams <codehelp@debian.org>

Prev by Date: Re: [content@debconf.org: DebConf - talk scheduled: Cloud Images BoF]
Next by Date: Re: checksum files are not signed what gives?
Previous by thread: New Debian-CD Global Mirror locations
Next by thread: Re: checksum files are not signed what gives?
Index(es):
- Date
- Thread