diff --git a/website/docs/source/v2/boxes/format.html.md b/website/docs/source/v2/boxes/format.html.md
index 8f15cc9dc..a3de9bf9e 100644
--- a/website/docs/source/v2/boxes/format.html.md
+++ b/website/docs/source/v2/boxes/format.html.md
@@ -38,7 +38,7 @@ providers from a single file, and more.
 
 <div class="alert alert-block alert-info">
 <strong>You don't need to manually make the metadata.</strong> If you
-have an account with <a href="#">Vagrant Cloud</a>, you
+have an account with <a href="http://www.vagrantcloud.com">Vagrant Cloud</a>, you
 can create boxes there, and Vagrant Cloud automatically creates
 the metadata for you. The format is still documented here.
 </div>
@@ -53,7 +53,9 @@ It is a JSON document, structured in the following way:
     "version": "0.1.0",
     "providers": [{
       "name": "virtualbox",
-      "url": "http://somewhere.s3.com/precise64_010_virtualbox.box"
+      "url": "http://somewhere.com/precise64_010_virtualbox.box",
+      "checksum_type": "sha1",
+      "checksum": "foo"
     }]
   }]
 }
diff --git a/website/docs/source/v2/cli/box.html.md b/website/docs/source/v2/cli/box.html.md
index 467ee9cf4..d26e03e6c 100644
--- a/website/docs/source/v2/cli/box.html.md
+++ b/website/docs/source/v2/cli/box.html.md
@@ -89,6 +89,12 @@ you're not using a catalog).
   a catalog, the name is included in the catalog entry and doesn't have
   to be specified.
 
+<div class="alert alert-block alert-warn">
+<strong>Checksums for versioned boxes or boxes from Vagrant Cloud:</strong>
+For boxes from Vagrant Cloud, the checksums are embedded in the metadata
+of the box. The metadata itself is served over TLS and its format is validated.
+</div>
+
 # Box List
 
 **Command: `vagrant box list`**