Search Mailing List Archives
[liberationtech] secure download tool - doesn't exist?!?
griffinboyce at gmail.com
Mon Jul 1 14:59:21 PDT 2013
On Jul 1, 2013 5:02 PM, "Eleanor Saitta" <ella at dymaxion.org> wrote:
> This, of course, is a global problem everywhere. A secure channel
> requires a shared secret, in this case between the developers and the
> end user. How does the user get their initial OS image if it didn't
> come with their machine or they didn't buy it in a brick and mortar
It's particularly devious to serve up a tampered-with PGP/GPG4win download,
given how gpg signatures are for other critical software.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the liberationtech