1

Does elementary OS PGP-sign ISO downloads? If not, is there a good avenue for requesting this?

Ubuntu, Fedora, Arch, Gentoo, and more all sign their downloads with GPG and provide cryptographic signatures verifying integrity and authenticity of their installers. As a security-conscious user, this is very important to me.

Improve this question
2

1 Answer 1

Reset to default
1

elementary OS signs its distribution iso, cf. https://elementary.io/docs/installation#verify-your-download (for elementary OS 0.4 (loki) they used sha256sum)

For older elementary versions you should check: How to verify the downloaded .iso file?

Improve this answer
1
  • As an aside, cryptographic hashes are not the same thing as cryptographic signatures; hashes prove integrity and signatures prove both integrity and authenticity, that the file comes from the owner of a specific key.
    – Naftuli Kay
    Nov 1, 2016 at 16:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.