It is clear for us that getting an commercial SSL certificate is not enough to strongly authenticate our website, and for example authenticity of our releases.That's why we always propose you stronger ways of authenticating our Tails release using OpenPGP signatures.