On 05/16/2011 08:10 PM, Richard Dowty wrote:
> I am trying to be careful when downloading since there is so much that
> is going on with unprotected internet. especially something like this.
The web of trust is more of a gpg/pgp thing. Alice and Bob verify each
others keys, then Charles verifies Bob's key. Since Charles trusts Bob,
and Bob trusts Alice, Charles can trust that Alice is valid since he
trusts Bob. There's more of a "chain of trust". As for downloading
stuff for linux from the web, anyone worth their salt and bundling will
provide a public key with their software.
I'd be more worried about the certificates included with your browser
than a web of trust of keys.