Re: Might want to update /releases/ to be less proud of MD5

[Błażej M .]

 You are right. 

I think that the CD and  DVD images should be sign with image mainintainer's 
GPG key before uploading them to server.

This would be better and the safer solution.