On Fri, Dec 11, 2015 at 01:28:04PM +0100, Kamil Cholewi??ski wrote:
The official CDs have the signify key physically printed on them.
You press a new CD, print a new cover, etc.
...and intercept the package being delivered to you?
Yes, it's possible, but somebody who had the resources to go to that
extreme, and a motive to single you out as a target, would presumably
have other ways to invade your privacy and integrity open to them.
If you want to rely on third parties, I can send you a copy of the
signify keys, signed by my PGP key. How would that help you at all?
Sounds reasonable to me.
In what way does this help?
] -----BEGIN PGP SIGNED MESSAGE-----
] Hash: SHA1
]
] untrusted comment: openbsd 5.5 base public key
] RWRGy8gxk9N9314J0gh9U02lA7s8i6ITajJiNgxQOndvXvM5ZPX+nQ9h
] untrusted comment: openbsd 5.5 firmware public key
] RWTdVOhdk5qyNktv0iGV6OpaVfogGxTYc1bbkaUhFlExmclYvpJR/opO
] untrusted comment: openbsd 5.5 packages public key
] RWQQC1M9dhm/tja/ktitJs/QVI1kGTQr7W7jtUmdZ4uTp+4yZJ6RRHb5
] untrusted comment: openbsd 5.6 base public key
] RWR0EANmo9nqhpPbPUZDIBcRtrVcRwQxZ8UKGWY8Ui4RHi229KFL84wV
] untrusted comment: openbsd 5.6 firmware public key
] RWT4e3jpYgSeLYs62aDsUkcvHR7+so5S/Fz/++B859j61rfNVcQTRxMw
] untrusted comment: openbsd 5.6 packages public key
] RWSPEf7Vpp2j0PTDG+eLs5L700nlqBFzEcSmHuv3ypVUEOYwso+UucXb
] untrusted comment: openbsd 5.7 base public key
] RWSvUZXnw9gUb70PdeSNnpSmodCyIPJEGN1wWr+6Time1eP7KiWJ5eAM
] untrusted comment: OpenBSD 5.7 firmware public key
] RWSuRBL44FVkb2QuvtlwOJmzS9UJtbKZd7GEYcol8HPXu4On/Ct1LoZr
] untrusted comment: openbsd 5.7 packages public key
] RWTJ1iHLn/zcvJJSbxJIEU9ChlfAlU16XoLLxmxciliOFWfTLyOv0vQs
] untrusted comment: openbsd 5.8 base public key
] RWQNNZXtC/MqP3Eiu+6FBz/qrxiWQwDhd+9Yljzp62UP4KzFmmvzVk60
] untrusted comment: OpenBSD 5.8 firmware public key
] RWTpkvg4fhJCDx9yL4bUCou/vtAecPVTfcaaGESQeBruwX/qHToMvWh6
] untrusted comment: OpenBSD 5.8 packages public key
] RWRlkI2aFHvL/XGqD+lFerD/xUi/jnAXKwdFQwZDekYwDrEPSpSWgpI9
] untrusted comment: openbsd 5.9 base public key
] RWQJVNompF3pwfIqbg+5sxfpxmZMa3tTBaW4qbUhWje/H/M7glrA6oVn
] untrusted comment: OpenBSD 5.9 firmware public key
] RWSdmaNkytzh6BApmPSNSDLNg26ZaXlY8g/879UvLdo3rjbsby76Eda1
] untrusted comment: OpenBSD 5.9 packages public key
] RWSLRYDCTJeWLIScncqwGuXK6JVXDcIyRT0q+0m30MXXG4W2xWS4NZBP
] -----BEGIN PGP SIGNATURE-----
] Version: GnuPG v1
]
] iQIcBAEBAgAGBQJWasZfAAoJELBdwBmbGNHy2gMP/1ESt/E8kDS3CtODAyehvheH
] 5j0cEXBTnaVLFeu7jmGDbVIiukLBbjqJ3eQiwmwnBt3uSC0P/OyrHPlEsKc8rWqs
] dPejCdZbfPpwtBMOn4P33dblDwog7qfTGU1Qu0GO9XWmEovO4iBUYb0Nuc7nipQX
] fPyHtZZGNqvBiAGMU9i2YDzwn2tYW6gxiU0nB2SnT3acuJximw6/YrVENREQD4DD
] EekXcx8wYxBU+y3JE1fj90s1n3qXQm9s3B/Mm5/X8MIXZbi6W7dWnrIcrzDLDvyg
] ZV/4UC/90NcfUn0EKG+su8r1XuXszYDspOPz7qKPbx+X/aYCbwAlEx7ajVVj60kr
] yiuFk9yhPb7cFlR3EmuABY3P8u6N7KbeWinaXBy6dOxMYJDZgztVAcqIw72qhuNF
] NNtCY727EXlbhgF+adujDvyTFy2U2/13/vllbtOl9qaN/mYlUm1iVFdIMfLd0TGe
] Ts6AIazNZdbQxsUnglzpjhJqyNaoK73SoqwwawBDvT1TpU0T6weIdrQWWaYBjngr
] fd0xaR73GffvLO5gqnFdbikw6OGizGrGQ/YIN4354WoUzpmAXtXv8cajKVwKbP3F
] SnVzgRgPqQJDCQY3gqJ+cIHBQsL3yNTiWtq/gIYeK1W+Wm7yXKn+wKbngcyifoiG
] GnfSlG7cNb0cpB+pRJTr
] =Pzev
] -----END PGP SIGNATURE-----
--
Tati Chevron
Perl and FORTRAN specialist.
SWABSIT development and migration department.
http://www.swabsit.com