Re: [Tails-dev] Missing bit of information on your website

[sajolida]

intrigeri:
> Cody Brownstein:
>> Sunny Karnani wrote:
>>> I was looking over the download and verification instructions and
>>> noticed that it might be helpful to add an additional step in the
>>> Command line instructions under "See instructions for basic OpenPGP
>>> verification.
>>> "
>>>  that
>>> describes how to import the Tails signing key.
> 
>> I agree with you that the user should be instructed to not only download
>> the Tails signing key but to import it as well.
> 
>> I am attaching to this email a patch that fixes that.
> 
> Thanks!
> I've updated https://redmine.tails.boum.org/code/issues/16175
> accordingly. Looks like your patch implements the (A) option.

Thanks for the patch Cody! I applied it on master.

-- 
sajolida
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

[Tails-dev] Missing bit of information on your website

[Wiktor Kwapisiewicz]

Hi Cody,

> I agree with you that the user should be instructed to not only download
> the Tails signing key but to import it as well.

An alternative would be to add "--auto-key-retrieve" to gpg options before
"--verify", that would (as the name implies) download the key if it's not
present locally avoiding the entire import step.

(The key and signature can be configured to download the key from
https://boum.org, avoiding issues with keyservers).

Another suggestion may be adding "--with-fingerprint" to "--verify" and asking
the user to check if the verification prints:

> Primary key fingerprint: A490 D0F4 D311 A415 3E2B  B7CA DBB8 02B2 58AC D84F

(Currently the guide shows an example with an output that prints subkey
fingerprint, and that may change while the primary key's fingerprint stays the
same).

Kind regards,

Wiktor

-- 
https://metacode.biz/@wiktor


___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Missing bit of information on your website

[intrigeri]

Hi,

Cody Brownstein:
> Sunny Karnani wrote:
>> I was looking over the download and verification instructions and
>> noticed that it might be helpful to add an additional step in the
>> Command line instructions under "See instructions for basic OpenPGP
>> verification.
>> "
>>  that
>> describes how to import the Tails signing key.

> I agree with you that the user should be instructed to not only download
> the Tails signing key but to import it as well.

> I am attaching to this email a patch that fixes that.

Thanks!
I've updated https://redmine.tails.boum.org/code/issues/16175
accordingly. Looks like your patch implements the (A) option.
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Missing bit of information on your website

[Cody Brownstein]

Hi Sunny!

Sunny Karnani wrote:
> I was looking over the download and verification instructions and
> noticed that it might be helpful to add an additional step in the
> Command line instructions under "See instructions for basic OpenPGP
> verification.
> "
>  that
> describes how to import the Tails signing key.

I agree with you that the user should be instructed to not only download
the Tails signing key but to import it as well.

I am attaching to this email a patch that fixes that.

-- 
Cody Brownstein
Liquidity, LLC
From 2411963eebe0e91f2248e1a55612bd5ae7cf7e27 Mon Sep 17 00:00:00 2001
From: Cody Brownstein 
Date: Sun, 2 Dec 2018 23:05:02 -0800
Subject: [PATCH] Instruct user to import Tails signing key

---
 wiki/src/install/inc/steps/download.inline.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wiki/src/install/inc/steps/download.inline.html b/wiki/src/install/inc/steps/download.inline.html
index a255e2104d..48b20a9d51 100644
--- a/wiki/src/install/inc/steps/download.inline.html
+++ b/wiki/src/install/inc/steps/download.inline.html
@@ -289,7 +289,7 @@ BitTorrent.
 
 
   
-   Download the [[Tails signing key|tails-signing.key]].
+   Download and import the [[Tails signing key|tails-signing.key]].
   
 
   
-- 
2.20.0.rc1



signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

[Tails-dev] Missing bit of information on your website

[Sunny Karnani]

Hello:

I was looking over the download and verification instructions and noticed
that it might be helpful to add an additional step in the Command line
instructions under "See instructions for basic OpenPGP verification.
"
that
describes how to import the Tails signing key.

Thank you,
Sunny
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.