3 ms·
FreeBSD: Signed checksums are linked from the same table as the ISOs on the download page: https://www.freebsd.org/where.html https://www.freebsd.org/where.htm
by danieldk 10y ago
FreeBSD: Signed checksums are linked from the same table as the ISOs on the download page:
https://www.freebsd.org/where.html https://www.freebsd.org/where.html
https://www.freebsd.org/releases/10.3R/signatures.html https://www.freebsd.org/releases/10.3R/signatures.html
Downloads are via FTP by default, but I agree with those that HTTPS cannot be trusted either. Signatures plus building up key trust is the way to go.
Hopefully Keybase.io will make it easier in the future to establish trust in such keys.