- The download correlation is not practical as the file of the signing
  key changes every time we update it.
- The WoT through debian-keyring is explained in /install/debian/usb
  already.