[03:28:05]
<eXv83X> I tried to download Tuta's public key from
https://github.com/tutao/tutanota/blob/master/tutao-pub.pem?raw=true
but GitHub rate-limited me and denied access during my first attempt. Also, the file contents didn't display without javascript enabled, so I had to add "?raw=true" to the link.
[03:28:39]
<eXv83X> So here is Tuta's public key. Copy and paste into a text editor, and save the file as tutao-pub.pem
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFrLW999Y/ODqGfGKSzh
7SFm6UgIj5scpb1r+KmEgVr/3zmd973+u2z5gG/wtayUbdVUGlzTgxqTE76BGTBR
szq932uTsPfjRbtbyjIOzfzPvkyAB1Ew91gQk5ubrO1VCbXAZyuFi7RxDibuklLO
lzHyjKyEIVTTdOqOTE+mg/vr41MxDW0X4nZw5MT1mIV/aYGeOSdtNdFsL69aR+d7
KufD43J60FUS9G0tf4KmyQInmGqC8MSXCO0SMwwEJZDxDzkBsSensKfS0HzIjCXS
or/Ahu6RwhEhjm7MyXbhiDyis+kGHSfatsO5KWWuZ4xgCEUO0L6vMQwr5M/qYOj1
7QIDAQAB
-----END PUBLIC KEY-----
[03:29:23]
<eXv83X> Tuta's help articles instruct how to verify their desktop app installer:
https://tuta.com/support/howto#verify-desktop
( also see https://github.com/tutao/tutanota/blob/master/buildSrc/installerSigner.js?raw=true )
but for some reason javascript is required to read Tuta's help articles. so this is how to do it on linux with openssl.
1. Make sure the files
tutanota-desktop-linux.AppImage ( https://app.tuta.com/desktop/tutanota-desktop-linux.AppImage ),
linux-sig.bin ( https://app.tuta.com/desktop/linux-sig.bin ),
and tutao-pub.pem ( https://github.com/tutao/tutanota/blob/master/tutao-pub.pem?raw=true )
are in the same directory
2. Open a terminal and change to that directory (with the cd command)
3. Run this command:
openssl dgst -sha512 -verify tutao-pub.pem -signature linux-sig.bin tutanota-desktop-linux.AppImage
You should see "Verified OK"
[03:29:51]
<eXv83X> The links to download the Linux, Windows, and macOS app installers can be easily found on https://tuta.com
The links to the Windows and macOS app installers are
for Windows: https://app.tuta.com/desktop/tutanota-desktop-win.exe
for macOS: https://app.tuta.com/desktop/tutanota-desktop-mac.dmg
The links to the Windows and macOS app installer signatures are
for Windows: https://app.tuta.com/desktop/win-sig.bin
for macOS: https://app.tuta.com/desktop/mac-sig-dmg.bin
[15:03:07]
<nyxn> hey
[15:45:32]
<hexuan> what？