> This mailing list is not about snake oil products on sale somewhere. > The post I replied to asked how one can be sure he runs trusted > software and my reply was it doesn't help you if you aren't 100% > sure your hardware is kosher. And for all practical purposes you can't.
True but I think it should be enough for most people if the "OpenBSD team" posts hashes or sigs on their sites and you download from a mirror and check against those hashes or sigs. If someone has enough power to p0wn the OpenBSD site as well as various mirrors you may as well quit while you're ahead. (Yes I realize they already do that. Apparently the OP does not realize that)
