Verifying a Devuan download

From	Spiros Bousbouras <spibou@gmail.com>
Newsgroups	comp.os.linux, comp.os.linux.misc
Subject	Verifying a Devuan download
Date	2022-10-26 20:55 +0000
Organization	Aioe.org NNTP Server
Message-ID	<bN6QovVSHU0Rk53Sa@bongo-ra.co> (permalink)

Cross-posted to 2 groups.

Show all headers | View raw

I don't know of a Devuan specific group so I'm posting to 2 general Linux
ones.

From  https://files.devuan.org/devuan_chimaera/desktop-live/  I downloaded
devuan_chimaera_4.0.2_amd64_desktop-live.iso .The SHA-256 sum , given by
a different file on the same page , matches. Do I need to verify anything
else , say something GPG related ? There is for example a SHA256SUMS.txt.asc
file on the same page and on  https://files.devuan.org/  there exist also
devuan-archive-keyring.gpg  and  devuan-devs.gpg .Do I need to do anything
with those ?

For my general education , what additional protections will any GPG checks
offer ? I assume that the HTTPS makes it unlikely that I was the victim of
a MITM attack and accessed the wrong sites. So what does the GPG do on top
of that ?

-- 
Why does he have to recharge at least 10 times during the movie, did
Apple make him?
  www.imdb.com/review/rw2966641

Back to comp.os.linux.misc | Previous | Next — Next in thread | Find similar

Thread

Verifying a Devuan download Spiros Bousbouras <spibou@gmail.com> - 2022-10-26 20:55 +0000
  Re: Verifying a Devuan download "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-10-26 17:04 -0400
  Re: Verifying a Devuan download Rich <rich@example.invalid> - 2022-10-26 21:27 +0000
    Re: Verifying a Devuan download Richard Kettlewell <invalid@invalid.invalid> - 2022-10-27 10:10 +0100
      Re: Verifying a Devuan download Anssi Saari <as@sci.fi> - 2022-10-27 14:22 +0300
        Re: Verifying a Devuan download "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-10-27 12:12 -0400
        Re: Verifying a Devuan download Richard Kettlewell <invalid@invalid.invalid> - 2022-10-27 23:03 +0100
      Re: Verifying a Devuan download "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-10-27 12:00 -0400
        Re: Verifying a Devuan download Spiros Bousbouras <spibou@gmail.com> - 2022-10-28 17:32 +0000
          Re: Verifying a Devuan download "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-10-28 16:24 -0400
      Re: Verifying a Devuan download Spiros Bousbouras <spibou@gmail.com> - 2022-10-28 10:51 +0000
        Re: Verifying a Devuan download Richard Kettlewell <invalid@invalid.invalid> - 2022-10-28 13:20 +0100
        Re: Verifying a Devuan download "Andrei Z." <no-email@invalid.invalid> - 2022-10-28 15:29 +0300
  Re: Verifying a Devuan download Fenris <fenris@invalid.invalid> - 2022-10-26 21:34 +0000

csiph-web