<html><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:13px"><div id="yui_3_16_0_1_1442247213732_4160"><span id="yui_3_16_0_1_1442247213732_4161">It is not time consuming.. just for the user experience.. </span></div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Helvetica Neue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 13px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Monday, 14 September 2015 9:39 PM, Ralf Mardorf <ralf.mardorf@alice-dsl.net> wrote:<br> </font> </div> <br><br> <div class="y_msg_container">On Mon, 14 Sep 2015 08:39:00 -0700, Ryein Goddard wrote:<br clear="none">>Probably a good idea to have something on the site reminding users to<br clear="none">>verify the download. Especially something as important as the<br clear="none">>operating system.<br clear="none"><br clear="none">Several times I put this issue in on *buntu mailing lists.<br clear="none"><br clear="none">Even if the download buttons would link to the download site with the<br clear="none">signed checksums, instead of just downloading the image, while<br clear="none">automatically <a shape="rect" href="https://help.ubuntu.com/community/VerifyIsoHowto" target="_blank">https://help.ubuntu.com/community/VerifyIsoHowto </a>would<br clear="none">pop up too, then how do you expect that averaged users should get a key<br clear="none">they trust, that can be used to verify ownership of a key that claims<br clear="none">to be owned by Ubuntu?<br clear="none"><br clear="none">It's a well-meant idea, but Rune Schjellerup Philosof, Rajeev Bhatta<br clear="none">and Ryein Goddard please be honest, how time consuming was it for you<br clear="none">to get a key you trust, that can be used to verify ownership of the<br clear="none">public Ubuntu key?<br clear="none"><br clear="none">Do you expect that an averaged user who automatically needs to get<br clear="none">signed checksums provided by pushing a button, instead of visiting the<br clear="none">download site on her/his own, would like to go through the hassle that<br clear="none">comes with the web of trust?<br clear="none"><br clear="none">Regards,<br clear="none">Ralf<div class="yqt7686099023" id="yqtfd63890"><br clear="none"><br clear="none">-- <br clear="none">Ubuntu-devel-discuss mailing list<br clear="none"><a shape="rect" ymailto="mailto:Ubuntu-devel-discuss@lists.ubuntu.com" href="mailto:Ubuntu-devel-discuss@lists.ubuntu.com">Ubuntu-devel-discuss@lists.ubuntu.com</a><br clear="none">Modify settings or unsubscribe at: <a shape="rect" href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss</a><br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>