I wish to verify the signatures of Tor, but when I download the package I only have the .exe
file to extract, I don't see any .asc
file. I was following the short user manual for verify the signatures, but seems I cannot do it. Any suggestion?
-
There's a link called (sig) that will take you to a new page with the PGP signature, simply file save as.... within your browser and it will automatically name it as it should.– user12234Commented Mar 24, 2016 at 8:34
-
Your answer brings nothing new. If you want to support the previous ones, you should give them an upvote when you will have enough reputation.– YurikoCommented Mar 24, 2016 at 9:13
2 Answers
When you download Tor or the Browser Bundles directly from Tor Project Download Page you can find a link called (sig) this is the asc file you need for verifying the downloaded packages.
The signature is not bundled with the archive; it can be found on the Tor Project website in the same place as the download (just append .asc
to the end of the archive's path or look for the sig
link under the download link).
See here for a full list of TBB 3.5 archives and signatures.