SHA512SUMS <http://cdimage.debian.org/debian-cd/8.5.0/amd64/bt-dvd/SHA512SUMS> for instance is not signed so whats the point of SHA512SUMS.sign <http://cdimage.debian.org/debian-cd/8.5.0/amd64/bt-dvd/SHA512SUMS.sign>
I'm on page http://cdimage.debian.org/debian-cd/8.5.0/amd64/bt-dvd/ which is not https this is all hokey -- MITM? -Steve
