verification: add links to top warning (#26539)

torproject · Sep 4, 2018 · ec59f0b · ec59f0b
1 parent 1ef3d57
commit ec59f0b
Show file tree

Hide file tree

Showing 3 changed files with 28 additions and 5 deletions.
diff --git a/download/en/download-easy.wml b/download/en/download-easy.wml
@@ -23,7 +23,16 @@
 	<!-- BEGIN TEASER WARNING -->
 	<div class="warning-top">
 		<h2>Want Tor to really work?</h2>
-		<p>You need to change some of your habits, as some things won't work exactly as you are used to. Please read the <a href="#warning">full list of warnings</a> for details.</p>
+		<p>You need to change some of your habits, as some things won't
+                work exactly as you are used to. Please read the
+                <a href="#warning">full list of warnings</a> for details.</p>
+                Always <a href="<page docs/verifying-signatures>">
+                verify OpenPGP package signatures</a> (sig) to make sure you've downloaded
+                the file we intended you to get. We also offer
+                <a href="https://dist.torproject.org/torbrowser/<version-torbrowserbundle>/sha256sums-signed-build.txt">
+                sha256 checksums</a>.
+                The Firefox ESR in our bundles is modified from the default Firefox ESR.
+                </p>
 	</div>
 	<!-- END TEASER WARNING -->
 	<div id="download-donate" class="clearfix">

diff --git a/download/en/download-unix.wml b/download/en/download-unix.wml
@@ -92,6 +92,13 @@
 
 </table>
 
+<p>
+Always <a href="<page docs/verifying-signatures>">verify OpenPGP package signatures</a>
+(sig) to make sure you've downloaded the file we intended you to get.<br/>
+We also offer <a href="https://dist.torproject.org/torbrowser/<version-torbrowserbundle>/sha256sums-signed-build.txt">
+sha256 checksums</a>.
+</p>
+
 <div class="nb">
 <a id="packagediff"></a>
 <h2><a class="anchor" href="#packagediff">What's the difference between Stable &amp; Unstable?</a></h2>

diff --git a/download/en/download.wml b/download/en/download.wml
@@ -25,10 +25,17 @@
 <!-- BEGIN TEASER WARNING -->
     <div class="warning-top">
       <h2>Want Tor to really work?</h2>
-	<p>You need to change some of your habits, as some things won't work exactly as
-you are used to. Please read the <a href="#warning">full list of warnings</a> for details.
-	</p>
-      </div>
+        <p>You need to change some of your habits, as some things won't work exactly as
+        you are used to. Please read the <a href="#warning">full list of warnings</a> for details.
+        Always <a href="<page docs/verifying-signatures>">
+        verify OpenPGP package signatures</a> (sig) to make sure you've
+        downloaded the file we intended you to get.
+        We also offer
+        <a href="https://dist.torproject.org/torbrowser/<version-torbrowserbundle>/sha256sums-signed-build.txt">
+        sha256 checksums</a>.
+        The Firefox ESR in our bundles is modified from the default Firefox ESR.
+        </p>
+    </div>
 <!-- END TEASER WARNING -->
 <!-- START DOWNLOADS -->
 <!-- START WINDOWS -->