diff --git a/core/src/main/java/hudson/model/DownloadService.java b/core/src/main/java/hudson/model/DownloadService.java
index 658e21a18d943474e3478492d167d1bd00b094cf..2e592d8222c47d315c2edf4054f9053a12d33cf5 100644
--- a/core/src/main/java/hudson/model/DownloadService.java
+++ b/core/src/main/java/hudson/model/DownloadService.java
@@ -346,7 +346,7 @@ public class DownloadService extends PageDecorator {
 
     public static boolean neverUpdate = Boolean.getBoolean(DownloadService.class.getName()+".never");
 
-    /** @deprecated Use {@link DownloadSettings#setIgnoreSignature} instead. */
+    /** Now used only to set default value of, and enable UI switching of, {@link DownloadSettings#setIgnoreSignature}. */
     public static boolean signatureCheck = !Boolean.getBoolean(DownloadService.class.getName()+".noSignatureCheck");
 }
 
diff --git a/core/src/main/resources/jenkins/security/DownloadSettings/config.groovy b/core/src/main/resources/jenkins/security/DownloadSettings/config.groovy
index 9b11a442ef6b35b533914f50e9bca228fd1c59d8..90c81a0dab068f95c8b77a9a19708ec6cf852306 100644
--- a/core/src/main/resources/jenkins/security/DownloadSettings/config.groovy
+++ b/core/src/main/resources/jenkins/security/DownloadSettings/config.groovy
@@ -6,7 +6,9 @@ f.section(title: _("Download Preferences")) {
     f.entry(title: _("Use Browser"), field: "useBrowser") {
         f.checkbox()
     }
-    f.entry(title: _("Check Signatures"), field: "checkSignature") {
-        f.checkbox()
+    if (!instance.checkSignature || !hudson.model.DownloadService.signatureCheck) { // do not display this option by default
+        f.entry(title: _("Check Signatures"), field: "checkSignature") {
+            f.checkbox()
+        }
     }
 }