I know this a similare question was already asked in 2016 but I feel that the answer is quite insufficient: Secure download link (HTTPS) for Ubuntu desktop
There should be very clear path to securely acquire ubuntu instead of the now default of downloading it from http source.
Even MD5 checksums for the images are only accessible through http. Torrent link, same problem.
Maybe I am missing something, but it really looks like there is no way of getting a proper ubuntu copy securely.
Even with https mirrors, without a secure way of getting the MD5 from canonical, how can we trust that the image has not been tampered with?