Hi, sajolida wrote (14 May 2011 20:27:42 GMT) : > I had a look at possible GnuPG options for Windows user. The one > recommended by gnupg.org is Gpg4win. It doesn't work under Wine so I > couldn't test it so far. But for sure, it doesn't have a valid > mainstream HTTPS certificate ;) We could decide to mirror a > « trusted » version of it but I fear we don't feel like doing so.
Ok. > I agree with that. The GnuPG option seems similarly easy for Linux/Gnome > users. So we could do instead: > - Using our OpenPGP key with Gnome (recommended, Linux: Tails, Ubuntu, > Debian, Fedora, etc.) > That would be the Seahorse + Nautilus right-click technique > - Using Firefox (easy, Windows & MAC) > That would be the fail-over SHA-256 technique for Windows users > - Using our OpenPGP key without Gnome (advanced, Linux) > Same as the actual one > If we go for that, we would still need to add the SHA-256 sum on the > download page but we could remove the .iso.sha256 file from the > torrent and mirror servers. Ack, sounds great. Make sure you adapt the release_process page accordingly when you implement this on the download page. >> => I'm rather in favour of removing the SHA-256 method. > It would be half-removed then ;) Right :) Bye, -- intrigeri <intrig...@boum.org> | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc | Do not be trapped by the need to achieve anything. | This way, you achieve everything. _______________________________________________ tails-dev mailing list tails-dev@boum.org https://boum.org/mailman/listinfo/tails-dev