[Grml-devel] please provide https download at least for the signature

[T N]

hi,

i get big warnings here trying to download grml:

[cid:b45268ec-1a7a-45db-8b2d-77d2b3c7bbe2]
(something like "dont download this file: possible security risk" )

cause its provided without encryption.

Could you please provide https links (at least for the signature file if it is impossible for the iso)

thanks in advance

i tried to verify stuff but i am not sure if i did it in anyway right and am more confused then before

$ gpg grml64-full_2024.02.iso.asc
gpg: directory '/home/owner/.gnupg' created
gpg: keybox '/home/owner/.gnupg/pubring.kbx' created
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
gpg: assuming signed data in 'grml64-full_2024.02.iso'

gpg: Signature made Tue 27 Feb 2024 12:03:13 PM CET
gpg:                using RSA key 33CCB136401AFEC843A3876396A87872B7EA3737
gpg: Can't check signature: No public key
owner at PC-G2H367S:~/Owner.win/Downloads$  gpg --keyid-format long --keyserver hkps://keys.openpgp.org --recv-keys 0x96A87872B7EA3737
gpg: /home/owner/.gnupg/trustdb.gpg: trustdb created
gpg: key 96A87872B7EA3737: public key "Michael Prokop <mail at michael-prokop.at>" imported
gpg: Total number processed: 1
gpg:               imported: 1
owner at PC-G2H367S:~/Owner.win/Downloads$ sudo apt install gpg
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
gpg is already the newest version (2.2.40-1.1).
0 upgraded, 0 newly installed, 0 to remove and 16 not upgraded.
owner at PC-G2H367S:~/Owner.win/Downloads$ gpg grml64-full_2024.02.iso.asc
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
gpg: assuming signed data in 'grml64-full_2024.02.iso'
gpg: Signature made Tue 27 Feb 2024 12:03:13 PM CET
gpg:                using RSA key 33CCB136401AFEC843A3876396A87872B7EA3737
gpg: Good signature from "Michael Prokop <mail at michael-prokop.at>" [unknown]
gpg:                 aka "Michael Prokop <michael.prokop at synpro.solutions>" [unknown]
gpg:                 aka "Michael Prokop <mika at debian.org>" [unknown]
gpg:                 aka "Michael Prokop <mika at grml.org>" [unknown]
gpg:                 aka "Michael Prokop <prokop at grml-solutions.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 33CC B136 401A FEC8 43A3  8763 96A8 7872 B7EA 3737
owner at PC-G2H367S:~/Owner.win/Downloads$

regards

TN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://ml.grml.org/pipermail/grml-devel/attachments/20241021/0f1176ea/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 4464 bytes
Desc: image.png
URL: <http://ml.grml.org/pipermail/grml-devel/attachments/20241021/0f1176ea/attachment-0001.png>