Secure download of mint?

Chat about anything related to Linux Mint
Forum rules
Do not post support questions here. Before you post read the forum rules. Topics in this forum are automatically closed 6 months after creation.
Locked
shafh

Secure download of mint?

Post by shafh »

Hey everyone.
Maybe I'm paranoid, but:
I'm a little concerned that all download links for non-verified pages (not https). Theres not even a checksum such that I could verify if the packages has been altered.

Wouldn't it be nice to have certificate on linuxmint.com? Or have I misunderstood anything?
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 2 times in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
shafh

Re: Secure download of mint?

Post by shafh »

Exactly. md5sum, does not provide any improved security, if it isn't signed by a verified signature as well.
gmilo2 wrote:There is an md5sum check that can be done, example for Cinnamon 64-bit: http://www.linuxmint.com/edition.php?id=172 I would like to be able to verify signatures as well but they don't provide that.
User avatar
xenopeek
Level 25
Level 25
Posts: 29615
Joined: Wed Jul 06, 2011 3:58 am

Re: Secure download of mint?

Post by xenopeek »

All the packages are signed, and your package manager is set up to refuse to install unsigned packages. However, yes the website doesn't use https and we only have md5 signatures.
Image
English Invader
Level 4
Level 4
Posts: 247
Joined: Thu Apr 23, 2015 11:53 am

Re: Secure download of mint?

Post by English Invader »

As long as no one picks up any viruses/malware from downloading Mint (or any Linux distro), I don't see what the problem is.
shengchieh

Re: Secure download of mint?

Post by shengchieh »

The only distro I seen very secure download is tails. After download, you check everything, so that nobody spying on you.

Sheng-Chieh
Locked

Return to “Chat about Linux Mint”