Date: Fri, 21 Aug 2020 20:07:44 +0000 From: 6E7368 <6E7368@protonmail.com> To: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: Installation media signatures? Message-ID: <Cj3Yc3KOW6TcZ3nphegDUTStxzAHyQc0QyK3Mzvno5rtVkLb0wg54TrVPwKICRO3fse4LuY2whUoPU0lEZWHspVkSozs1mN_EbAqns-yzFI=@protonmail.com>
next in thread | raw e-mail | index | archive | help
I was about to flash the rpi3 12.1-RELEASE img to an SD card, but I couldn't find any signatures to verify it against. Am I missing something, or are users supposed to install unverified images? Checksums without a signature are not an assurance against tampering. I didn't find what I was looking for in the handbook or with Google, and I thought I'd ask here instead of bugging the security mailing list.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Cj3Yc3KOW6TcZ3nphegDUTStxzAHyQc0QyK3Mzvno5rtVkLb0wg54TrVPwKICRO3fse4LuY2whUoPU0lEZWHspVkSozs1mN_EbAqns-yzFI=>
