Clicking The Obvious things from https://www.ubuntu.com to get a
download leads to:

https://www.ubuntu.com/download/desktop/thank-
you?country=US&version=16.04.3&architecture=amd64

which has an https link to https://tutorials.ubuntu.com/tutorial
/tutorial-how-to-verify-ubuntu

If you trust the CA system far enough, then this provides an easy way to
get instructions how to validate the download.

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1359836

Title:
  Ubuntu ISOs downloaded insecurely, over HTTP rather than HTTPS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/1359836/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to