On Thu, Jul 05, 2018 at 12:02:28PM +0300, Georgi Guninski wrote: > Does net install cryptographically verify downloaded data? > > Searching the iso for gpg/keyrings didn't return any results for me. Look for the package "debian-archive-keyring". APT depends on it and uses the keys it provides to verify digital signatures of all the packages it installs. See the apt-secure(8) manual page for more info.