On June 19, 2018 2:18:34 AM EDT, bill-auger <[email protected]> wrote: >Ineiev's comment raises another good point - this would be a good >candidate for >a GNU article if there is not one already > >the point being that community building is itself a tool to this end - >it can be >recommended that rather than trusting implicitly in anything that your >web >browser shows you, one could invest some time investigating some >side-channels >such as IRC and mailing lists where they could become familiar >first-hand with >the developers and other users of their operating system; and perhaps >verify the >key fingerprints found on the web with other users, and adding them to >their >personal keyring before downloading anything
Also, always use https for signature files, keys, checksums.
