Well the issue is the computer doesn't have access to internet at the moment. I have the sig file, master key file, and the iso, I just want to know if there is some way to go through the whole process of verification without the internet, by just checking numbers manually.
On Saturday, August 17, 2019 at 2:41:49 PM UTC-4, sourcexorapprentice wrote: > > The process is to verify the Qubes ISO signature is correct, and not to > trust a SHA256 checksum posted on the same website hosting the file. The > hash only confirms the integrity and not the validity of the file (which > may be infected). It's a security theater exercise we're used to doing > elsewhere in order to provide us with the warm fuzzy feeling of a false > sense of security. > > Instructions here on how to verify the latest Qubes ISO is legitimate: > https://www.qubes-os.org/security/verifying-signatures/ > > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c296b2e2-2801-4a9b-84fd-abf0065afd2d%40googlegroups.com.
