[liberationtech] secure download tool - doesn't exist?!?

Eleanor Saitta ella at dymaxion.org
Mon Jul 1 16:32:48 PDT 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 2013.07.01 16.30, Julian Oliver wrote:
> ..on Mon, Jul 01, 2013 at 03:17:27PM -0700, Eleanor Saitta wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>> 
>> On 2013.07.01 15.15, Julian Oliver wrote:
>>> ..on Mon, Jul 01, 2013 at 06:03:01PM +0000, adrelanos wrote:
>>>> In response to "the tool doesn't exist"...
>>> 
>>> apt-get install tor && torify wget http://path.to/file
>> 
>> And how did you verify the trust path for your initial debian
>> install?
> 
> I SHA-256 the downloaded ISO. You?

Go re-read "Reflections on Trusting Trust" again. :-)

E.

- -- 
Ideas are my favorite toys.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iF4EAREIAAYFAlHSEaAACgkQQwkE2RkM0wqRJAD/Yg/VNu2hHJ3xRCj9idPK7zWF
Ym4Uku/bxGo2J79VVzIA/2Kl0AQK3mMOoR5/NrnvyUyWA4ZOBY22tWwOwbZDJJQR
=ZpYL
-----END PGP SIGNATURE-----



More information about the liberationtech mailing list