On Tue, Sep 20, 2022 at 08:16:05PM +0200, Thomas Schmitt wrote: > Hi, > > to...@tuxteam.de wrote: > > If some Evil Instance is controlling your whole internet, well... > > your installation media will be already compromised. > > The attacker must not forget to fake the page with the Debian GPG > signatures: > https://www.debian.org/CD/verify
That was what I was handwaving at with my phrase "published checksums", which other people surely will check (let's hope they're seeing the same thing as the OP). > Further any contact has to be blocked with people who can say > Key fingerprint = 1046 0DAD 7616 5AD8 1FBC 0CE9 9880 21A9 64E6 EA7D > Key fingerprint = DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B > Key fingerprint = F41D 3034 2F35 4669 5F65 C669 4246 8F40 09EA 8AC3 > > > (As we are at repeating: > X-Clacks-Overhead: GNU Terry Pratchett > ) :) Cheers -- t
signature.asc
Description: PGP signature
