On Thu, 2011-01-20 at 11:22 -0500, Máirín Duffy wrote:
From talking to numerous novice users in the design of the site
I'm
not convinced that a checksum file is something that novice users are
aware of or much concerned about.
Ignorance is no excuse, as they old saying goes, and it's something that
needs brought to their attention, with the full how and why.
The main download link points directly to Fedora's main server,
not a
mirror, so they'd be downloading the checksum from the same source as
the payload anyway.
And the non-main download links...?
It was always the recommendation, before, to not download from the main
site, to spread the load around the mirrors.
When you burn the iso to media it has a built-in media check as well
which would protect against corruption
Only against corruptions at that point, not against malicious damage.
If someone's capable of releasing a compromised ISO, they're capable of
making it claim to pass its own self checks.
--
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686
Don't send private replies to my address, the mailbox is ignored. I
read messages from the public lists.