Host SHA256 checksums of the daily builds on https
Open, Needs TriagePublic


It's not exactly a confidence booster for the testers to see the ISOs, checksums and whatnot on a non-https server. For security reasons, I suggest to have the SHA256 sum of the daily builds on https, even if that means the Kubuntu main download page.

raddison created this task.Mar 5 2018, 11:32 PM
raddison updated the task description. (Show Details)Mar 5 2018, 11:35 PM

@raddison Well, I kinda understand what you mean. The SHA256SUMS.gpg key, the SHA256 and the .iso images are all in one basket.

I've downloaded the latest kubuntu-18.04-beta1-desktop-amd64.iso

The SHA256 reads:


@rikmills I hope it's accurate.

@rikmills I'm ready to check kubuntu-18.04-beta2-desktop-amd64

This is what I see