Hi, [email protected]: > Hi List, > > I downloaded the latest tails-2.10 and the .sig when i try to verify the > ISO with this command > > "gpg --keyid-format 0xlong --verify tails-i386-2.10.iso.sig > tails-i386-2.10.iso" > > i get this reply. > > gpg: Signature made Tue 24 Jan 2017 02:41:51 AM UTC > gpg: using RSA key 0x98FEC6BC752A3DB6 > gpg: Good signature from "Tails developers (offline long-term identity > key) <[email protected]>" [unknown] > gpg: aka "Tails developers <[email protected]>" [unknown] > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the owner. > Primary key fingerprint: A490 D0F4 D311 A415 3E2B B7CA DBB8 02B2 58AC D84F > Subkey fingerprint: BA2C 222F 44AC 00ED 9899 3893 98FE C6BC 752A 3DB6 > > > im concerned with the warning message showed by the gpg
Because many users are not familiar with GPG, which is not a surprise, because cryptography is often not very userfriendly, we currently advise users to download the ISO image using Bittorrent or our Mozilla extension. These methods make an automatic verification. For these methods of installation and verification, see for example https://tails.boum.org/install/win/usb/ Now, concerning GPG verification, which you might want to use as an additional step of verification, please make sure you've read the documentation https://tails.boum.org/install/download/openpgp/index.en.html#command-line Quoting from this page: "If the output also includes: gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Then the ISO image is still correct according to the signing key that you downloaded. To remove this warning you need to authenticate the signing key through the OpenPGP Web of Trust." So the signature is correct in your case, but you don't have certified the Tails signing key yourself after verification of the fingerprint. Cheers! u. _______________________________________________ tails-support mailing list [email protected] https://mailman.boum.org/listinfo/tails-support To unsubscribe from this list, send an empty email to [email protected].
