Re: [Tails-dev] [liberationtech] secure download tool - does…

Delete this message

Reply to this message
Author: Eleanor Saitta
Date:  
To: liberationtech
CC: Nathan of Guardian, The Tails public development discussion list
Subject: Re: [Tails-dev] [liberationtech] secure download tool - doesn't exist?!?
On 2013.07.01 12.19, adrelanos wrote:
> - you still have to tell the user "you must download tool X before
> you can download Y"


This, of course, is a global problem everywhere. A secure channel
requires a shared secret, in this case between the developers and the
end user. How does the user get their initial OS image if it didn't
come with their machine or they didn't buy it in a brick and mortar
store (both hard for FLOSS). Solutions in the non-general case are
nice, but we should also remember that we have no general case
solution either.

(Likewise for firmware, but that's much worse)

E.

- --
Ideas are my favorite toys.