8.04 md5sums

[Mario Vukelic]

On Thu, 2008-04-24 at 22:45 +0100, R Kimber wrote:
> As I tried to say, I'm not looking to the md5sum to guarantee
> security, only that the download process has worked properly, so that
> the file I get is the same as the file on the server.

I understood that, and I still think it's a bad idea:

     1. You should always check that the iso wasn't tampered with
     2. By using the md5sum from another server, you get your desired
        check that the download worked fine, and you get another level
        of confidence in the integrity of the iso for free