Project

General

Profile

Feature #8873

Bug #7552: Firefox extension to automatically verify the ISO checksum

Bug #6851: Fix ISO verification using checksum

Feature #8849: Technical specifications for ISO verification extension

Decide which kind of verification would the ISO verification extension do

Added by sajolida almost 4 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Installation
Target version:
-
Start date:
02/05/2015
Due date:
% Done:

0%

QA Check:
Feature Branch:
Type of work:
Discuss
Starter:
Affected tool:
ISO Verification Extension

Description

That could be:

- OpenPGP verification
- Checksum correlation against different websites
- Checksum against boum.org


Related issues

Blocks Tails - Feature #8855: Design data source for ISO verification extension Resolved 02/04/2015

History

#1 Updated by sajolida almost 4 years ago

  • Blocks Feature #8855: Design data source for ISO verification extension added

#2 Updated by sajolida almost 4 years ago

  • Blocked by Feature #8850: Investigate feasibility of OpenPGP signature verification in JavaScript added

#3 Updated by sajolida over 3 years ago

  • Blueprint set to https://tails.boum.org/blueprint/bootstrapping/extension

#4 Updated by sajolida over 3 years ago

  • Assignee deleted (sajolida)

I'm pretty much convinced that simple checksum verification is the way to go in such a context. See the security discussion on the blueprint: https://tails.boum.org/blueprint/bootstrapping/extension#verification

#5 Updated by sajolida over 3 years ago

  • Blocked by deleted (Feature #8850: Investigate feasibility of OpenPGP signature verification in JavaScript)

#6 Updated by sajolida over 3 years ago

  • Status changed from Confirmed to Resolved

From the discussion on tails-dev https://mailman.boum.org/pipermail/tails-dev/2015-March/008333.html, nobody argued strongly or provided good arguments to do something better than simple checksum verification. This could actually become quite strong once we get in the HPKP preload list of Firefox (#9026) and monitor externally the content of the website (#8650).

Also available in: Atom PDF