[tor-bugs] #7606 [Company]: get a graphical gpg file verification tool into all major operating systems / desktops by default

[Tor Bug Tracker & Wiki]

#7606: get a graphical gpg file verification tool into all major operating systems
/ desktops by default
---------------------+------------------------------------------------------
 Reporter:  proper   |          Owner:     
     Type:  task     |         Status:  new
 Priority:  normal   |      Milestone:     
Component:  Company  |        Version:     
 Keywords:           |         Parent:     
   Points:           |   Actualpoints:     
---------------------+------------------------------------------------------
 On Linux: [[BR]]
 At least gpg command line version is installed. You have to learn and use
 the command line or have to find and install a graphical tool, which both
 is difficult.

 On Windows: [[BR]]
 You have to install gpg, perhaps from http://www.gpg4win.org/. How do you
 authenticate the initial gpg download? But this website does not even have
 SSL.

 Idea for Linux / Gnome:

 Take over maintenance for
 [https://en.wikipedia.org/wiki/Seahorse_%28software%29 seahorse-plugins].
 Usability
 ([https://tails.boum.org/doc/get/verify_the_iso_image_using_gnome/index.en.html
 Tails example]) looks very well. Get the file verification function into a
 good shape, get everything else into an acceptable shape (so it won't be
 removed from Debian) and maintain a patches welcome state for anything
 else.

 Idea for Linux / KDE:

 Contribute the [https://en.wikipedia.org/wiki/KGPG kgpg]. Usability
 ([https://sourceforge.net/p/whonix/wiki/Verify_the_virtual_machine_images_using_Linux/
 Whonix example]) for file verification is not good as seahorse-plugins,
 but can be improved. Signature and file must be in same folder, there is
 no file selection dialog to choose the file. There is also no progress
 meter for verifying files.

 Idea for Linux / Unity:

 No idea, but since it's Ubuntu default there should be something installed
 by default as well.

 Idea for Windows:

 Contact microsoft and talk them into adding a gpg file verification to
 Windows by default.

 General:

 First a tools with good usability must exist. The second step is to get
 them installed by default in major operating systems.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7606>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online