Date: Sun, 10 Jan 2016 22:54:44 +0300 (MSK) From: Dmitry Morozovsky <marck@rinet.ru> To: Clint Armstrong <clint@clintarmstrong.net> Cc: freebsd-security@freebsd.org Subject: Re: Signed Checksums for release archives Message-ID: <alpine.BSF.2.00.1601102251350.68529@woozle.rinet.ru> In-Reply-To: <CAJMTyCGZSR-zBtihseyodocfo9Yz6O8n=Qy4Xv-7ocSYj%2BMYsw@mail.gmail.com> References: <CAJMTyCFBmpZ7LppyhCik_4JY7YsXmWiX6U%2B5JUrwdHpp8=Ru3w@mail.gmail.com> <alpine.BSF.2.00.1601101716520.68529@woozle.rinet.ru> <CAJMTyCGZSR-zBtihseyodocfo9Yz6O8n=Qy4Xv-7ocSYj%2BMYsw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 10 Jan 2016, Clint Armstrong wrote: > The signed checksums linked on that page only include checksums for the > .img and .iso images. Not for the .txz archives. Ah I see. But nevertheless, these .txz's are almost always accessed from the installer, which selects only approved mirror from well-defined list, and connects to them over TLS... -- Sincerely, D.Marck [DM5020, MCK-RIPE, DM3-RIPN] [ FreeBSD committer: marck@FreeBSD.org ] ------------------------------------------------------------------------ *** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- marck@rinet.ru *** ------------------------------------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1601102251350.68529>