I want to download and verify the ISO of lubuntu. The problem is I can't find a secure channel in the first place. The official ISO here is being downloaded with http (not https). Of course I can download and then verify the hash, but the only place I can find the hashes is here, which is also insecure http.
Any way to securely download the ISO?
Edit:
The proposed duplicate question is not similar to my case - it talks about downloading using apt, which uses an authentication mechanism (no user action needed). My questions is about files downloaded manually, thus I must authenticate the files by myself.