Topic: Security of Linux pip2 install electrum: Is it safe? (Read 377 times)
Thank you, I appreciate the info and the script
you have to verify it yourself. i wrote a script that downloads, verifies the tarball and does the install for you:
https://github.com/BitcoinsPakistan/electrum-install
https://github.com/BitcoinsPakistan/electrum-install
Will pip2 install verify the checksum of the downloaded file with a satisfying degree of security. One thing I could hope for is verifying the asc signature and that it is signed by trusted root certificate.
When installing like: sudo -H pip2 install https://download.electrum.org/2.8.3/Electrum-2.8.3.tar.gz
I found some info on how to verify the asc signature, like below, but is this necessary or already done by pip2 or the python setup script?
gpg --keyserver pool.sks-keyservers.net --recv-keys 7F9470E6
gpg --fingerprint
gpg --verify Electrum-2.8.3.tar.gz.asc
Best Alex
PS: Signature verification thread: https://bitcointalksearch.org/topic/how-do-i-verify-downloaded-electrum-using-signature-files-1046484
When installing like: sudo -H pip2 install https://download.electrum.org/2.8.3/Electrum-2.8.3.tar.gz
I found some info on how to verify the asc signature, like below, but is this necessary or already done by pip2 or the python setup script?
gpg --keyserver pool.sks-keyservers.net --recv-keys 7F9470E6
gpg --fingerprint
gpg --verify Electrum-2.8.3.tar.gz.asc
Best Alex
PS: Signature verification thread: https://bitcointalksearch.org/topic/how-do-i-verify-downloaded-electrum-using-signature-files-1046484
Jump to: