Re: CVE for Kali Linux

[Alexander Cherepanov <cherepan () mccme ru>]

On 2015-03-22 21:33, Daniel Micay wrote:
> HTTPS/HSTS/HPKP is important because it doesn't require that the user
> goes out of their way to validate the software (few do) and is needed to
> build the initial trust in the first place. How else do you get the GPG
> public key in the first place?

By HTTP via several routes. It's easy now -- just use Tor. Download you 
bootstrapping pieces through clearnet once and via Tor several times 
switching circuits in-between and compare them.

--
Alexander Cherepanov