Trisquel page is available over HTTPS, yet:

The download itself is over plain HTTP, ie. http(!)://cdimage.trisquel.info/trisquel-images/trisquel_7.0_amd64.iso.torrent

MD5: http(!)://cdimage.trisquel.info/trisquel-images/trisquel_7.0_amd64.iso.torrent.md5 GPG: http(!)://cdimage.trisquel.info/trisquel-images/trisquel_7.0_amd64.iso.torrent.asc

I thought hardcore free software proponents are also care very much about security...

Also, there are no instructions on how to use them. Shouldn't a security-conscious free software distribution also try to teach their users how to keep themselves secure?

Reply via email to