1

Does elementary OS PGP-sign ISO downloads? If not, is there a good avenue for requesting this?

Ubuntu, Fedora, Arch, Gentoo, and more all sign their downloads with GPG and provide cryptographic signatures verifying integrity and authenticity of their installers. As a security-conscious user, this is very important to me.

1

elementary OS signs its distribution iso, cf. https://elementary.io/docs/installation#verify-your-download (for elementary OS 0.4 (loki) they used sha256sum)

For older elementary versions you should check: How to verify the downloaded .iso file?

  • As an aside, cryptographic hashes are not the same thing as cryptographic signatures; hashes prove integrity and signatures prove both integrity and authenticity, that the file comes from the owner of a specific key. – Naftuli Kay Nov 1 '16 at 16:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.