Hi Thomas, On 2024-03-25 02:39, Thomas Lange wrote: > I don't think we need the link on the startpage, but maybe on the > /distrib page where we provide other ISO downloads. > I agree that not every user need to verify downloads. > But in the end I try to remember whenever I have verified an ISO by > myself. > I do that on a regular basis for educational purposes, as I see the value of being able to verify authenticity of our images with our own hands.
> I can't remember and I guess I never did it. Maybe I > check that I'm using https://www.debian.org. That's all I need to > trust. > It is not only a matter of trusting the website, but the network, and even the local filesystem. It happened to me once to have to re-flash a batch of 20 USBs, because I had not verified if the file I had at hands was the good one. I can imagine that for media vendors it is also of crucial importance, to make sure they are redistributing the authentic image. So here I adapt my original request: please add the link to /verify at the /distrib page; and if possible, also consider renaming the link of "other downloads", since the content of the target is not only about other downloads. For a minimal change, I'd say "other download options", but I'd prefer "other ways of getting debian" ("Getting Debian" is the title of the /distrib page, so it will be less confusing when the user lands on the target). Thanks for considering! Tassia.
