Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Aug 2020 20:07:44 +0000
From:      6E7368 <6E7368@protonmail.com>
To:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Installation media signatures?
Message-ID:  <Cj3Yc3KOW6TcZ3nphegDUTStxzAHyQc0QyK3Mzvno5rtVkLb0wg54TrVPwKICRO3fse4LuY2whUoPU0lEZWHspVkSozs1mN_EbAqns-yzFI=@protonmail.com>

next in thread | raw e-mail | index | archive | help

I was about to flash the rpi3 12.1-RELEASE img to an SD card, but I couldn't find any signatures to verify it against. Am I missing something, or are users supposed to install unverified images? Checksums without a signature are not an assurance against tampering.

I didn't find what I was looking for in the handbook or with Google, and I thought I'd ask here instead of bugging the security mailing list.

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Cj3Yc3KOW6TcZ3nphegDUTStxzAHyQc0QyK3Mzvno5rtVkLb0wg54TrVPwKICRO3fse4LuY2whUoPU0lEZWHspVkSozs1mN_EbAqns-yzFI=>