Hacker News new | ask | show | jobs
by bcl 3764 days ago
Fedora publishes GPG signed SHA256's of the iso's. eg. https://dl.fedoraproject.org/pub/fedora/linux/releases/23/Wo...
1 comments

Thanks! Fedora was one I didn't try (to install; I use it all the time). However there's still no way to use RPMFusion: http://rpmfusion.org/keys

Maybe there's something I'm missing?

Arch Linux has PGP signatures and is over https, as well as torrents which should be pretty reliable https://www.archlinux.org/download/
RPMFusion isn't considered part of Fedora. Yes, it would be nice if RPMFusion served hashes securely.