After heartbleed, I've become more security-conscious/paranoid than usual.
Here's a little snippet that compares a downloaded Ubuntu iso file to the
MD5 provided via SSL by Ubuntu. Not foolproof, but more peace of mind than
crossing fingers and hoping for the best on the unsecured http mirrors...