checksum and signature hard to find

[Davis, Matthew]

Hi,

I'm not sure whether this is the right mailing list.

I think there's a shortcoming with the iso download page.
e.g. https://www.ubuntu.com/download/server

There's a big download button for the iso. But there are no visible links for the checksum and signature file.
It's actually quite hard to find.

The URL pointed to by the ISO download button is a "thank you" page. It does not point to a mirror file, so I cannot easily modify that URL to find the checksum.
To get the checksum and signature file I have to


*        click on "alternative install"

*        click on the list of mirrors

*        choose a mirror (2 clicks),

*        navigate through the directory tree

*        then download the checksums and signature

This is just so needlessly convoluted.
To make matters worse, the official documentation<https://tutorials.ubuntu.com/tutorial/tutorial-how-to-verify-ubuntu?_ga=2.64884655.1248685753.1547162864-1813460345.1547162864#2> for how to verify an ISO says "Alongside the actual ISO files containing the Ubuntu image you downloaded, all Ubuntu mirrors publish some extra files". The main method for downloading the ISOs does not have those files alongside, because it's not a normal mirror page.

How about you add some small links next to the original iso download button which point to the checksum and signature files?

Or alternatively, add those links (and this link<https://tutorials.ubuntu.com/tutorial/tutorial-how-to-verify-ubuntu?_ga=2.64884655.1248685753.1547162864-1813460345.1547162864#1>) on the "thank you" page you get to after downloading the iso.
(This is a less desirable solution, since I often download the ISOs with wget, so I never actually see the thank you page.)



Matthew Davis
Technical Specialist
Telstra | Product Strategy & Innovation - Telstra Labs | Programmable Infrastructure
E: Matthew.Davis.2 at team.telstra.com<mailto:Matthew.Davis.2 at team.telstra.com>