On 12/16/20 2:23 PM, Kevin Fenzi wrote:
Yeah, there has to be an anchor for your trust. Right now that is "I trust the certificate authority that issued fedoraproject.org's cert".
I was trying to make a point that we don't have a way to check the initial image: it could be altered to falsely claim to be signed by fedoraproject.
The image check, in other words, defends against random corruption, and is helpless against targeted hacking. I thought it would be good to have a method to assure that it is indeed the same image that fedoracorp.org originally signed.
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
