diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-04-28 10:18:29 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-04-28 10:18:29 -0400 |
| commit | b61aa33dcca8cf1690bc3671d2c0884b262bffd5 (patch) | |
| tree | f14eedda03f44d5d23e454001b8828408ceea1cb /static/install.html | |
| parent | 29bf5d48170498a32da8d74de11579995410afa3 (diff) | |
explain why it can make sense to skip signify
Diffstat (limited to 'static/install.html')
| -rw-r--r-- | static/install.html | 17 |
1 files changed, 11 insertions, 6 deletions
diff --git a/static/install.html b/static/install.html index 9d136e1b..525ea8ad 100644 --- a/static/install.html +++ b/static/install.html @@ -147,15 +147,20 @@ Installed as /home/username/downloads/platform-tools/fastboot</pre> <a href="#obtaining-signify">Obtaining signify</a> </h3> - <p>To verify the download of the OS beyond the security offered by HTTPS, you need the - signify tool. If you don't have a way to obtain signify from a trusted package - repository, such as on Windows, skip the additional verification. This is an important - step, but it only makes sense if you can chain trust from your existing OS - install.</p> + <p>To verify the download of the OS beyond the security offered by HTTPS, you can use + the signify tool. If you do not have a way to obtain signify from a package repository + you're already trusting, it does not make sense to use it. GrapheneOS releases are + hosted on our servers and we do not have third party mirrors. A compromised signify + would be able to compromise your OS and the GrapheneOS download due to the lack of an + application security model on traditional operating systems. It would be worse than + not trying to verify the signatures. It's far less likely that our servers would be + compromised than someone's GitHub account or GitHub itself. You're already trusting + these installation instructions from our site, which is hosted on the same static web + server infrastructure as the releases.</p> <p>On many distributions, signify is available via a <code>signify</code> package in the official repositories. On Debian-based distributions like Ubuntu, the package and - command name were renamed to <code>signify-openbsd</code>. Following Debian tradition, + command were renamed to <code>signify-openbsd</code>. Following Debian tradition, the <code>signify</code> package and command are an <a href="http://signify.sourceforge.net/">unmaintained mail-related tool for generating mail signatures (not cryptographic signatures) with the final 3 releases from |