Package: cloud.debian.org Severity: important On the secret files found here: http://cloud.debian.org/cdimage/cloud/ there's a json file attached. Unfortunately, there's no SHA512, and of course, no GPG signature of this file, so it's impossible check the validity of the images. Please at least add a SHA512, then we can see later how we can sign the json file. Cheers, Thomas Goirand (zigo)