could you please try to at least spell the name right? this is giving my inner monk a headache...
On Thu, Mar 05, 2020 at 02:40:18PM +0000, Mark Fernandes wrote: > The only thing relevant to this topic in the guide, appears to be the > information on verifying signatures (which is of course standard practice). ... > authentic copies of the Quebos software. I've hinted at some ideas as to > how to do this, in my starting post for this topic. actualy, not the impression i am getting. if you knew how to verify a signature and what that means, pretty much all the "ideas" you listed would be obviously useless. as in, to "verify the installer/iso", all you need is to verify the signature: https://www.qubes-os.org/security/verifying-signatures/ that reduces the actual problem to "how to get/verify the qubes master key", for which suggestions are on that page, and which in general is a lot easier than trying to verify some multi-GB monster. for a lot of additional confirmations of the master key, you can use a searchengine, with/without tor, from different ISPs, ask in different chats, look at presentation slides/videos .... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200305145618.GM8973%40priv-mua.
