Trouble at Linux Mint — and beyond
Trouble at Linux Mint — and beyond
Posted Feb 25, 2016 22:55 UTC (Thu) by pizza (subscriber, #46)In reply to: Trouble at Linux Mint — and beyond by giraffedata
Parent article: Trouble at Linux Mint — and beyond
> Could the web browser take care of all this? It already has a web of trust for use in authenticating websites; how hard would it be for the web browser to validate a signed checksum and check the checksum when it downloads a file?
....This ends up devolving into a PKI problem..
(The signature could also be compromised, as could the public key used to check the signature, as could the fingerprint of the public key, and so forth...)