Re: [Tails-dev] Tails 0.14 vs. iceweasel 10.0.9esr-1

Üzenet törlése

Válasz az üzenetre
Szerző: adrelanos
Dátum:  
Címzett: tails-dev
Tárgy: Re: [Tails-dev] Tails 0.14 vs. iceweasel 10.0.9esr-1
I looked into the install-tbb.sh script.

Ague Mill:
> gpg --keyring /usr/share/keyrings/debian-keyring.gpg --verify

"$TBB_SIGNATURE" "$TBB_ARCHIVE"

I am not sure this is a good idea. There are a lot people in this
keyring. I'd only verify against the current TBB maintainers.

Not saying anyone in the Debian keyring is untrustworthy. Limiting the
the number of trusted people to the actual TBB maintainers dramatically
shrinks the attack surface.