Did you take a look here: https://www.debian.org/CD/verify , "Verifying authenticity of Debian CDs"? The https protocol would add quite some overhead to the download of the iso-files which are already big by them self. Regards, jvp.