add some documentation to the user section about establishing trust

[monkeysphere.git] / website / download.mdwn

diff --git a/website/download.mdwn b/website/download.mdwn
index 69048c932e4c4ccb2e609b89a75f6af8572c93ca..3ba40f4e37440a8bb0c0247e1ff2a97eabfdf1ae 100644 (file)
--- a/website/download.mdwn
+++ b/website/download.mdwn
@@ -1,26 +1,25 @@
-[[!template id="nav"]]
+[[meta title="Download"]]
 
-## Downloading and Installing ##
+# Downloading and Installing #
 
 If you are running a Debian system, you can install Monkeysphere
 by following these directions:
 
 You can add this repo to your system by putting the following lines in
-/etc/apt/sources.list.d/monkeysphere.list:
+`/etc/apt/sources.list.d/monkeysphere.list`:
 
        deb http://archive.monkeysphere.info/debian experimental monkeysphere
        deb-src http://archive.monkeysphere.info/debian experimental monkeysphere
 
-The repository is currently signed by [Daniel Kahn Gillmor's OpenPGP
-key](http://fifthhorseman.net/dkg.gpg "dkg's key"), key id D21739E9
-(fingerprint: `0EE5 BE97 9282 D80B 9F75 40F1 CCD2 ED94 D217 39E9`).
-To cryptographically verify the packages, you'll want to [add `dkg`'s
-key to your apt
-configuration](http://cmrg.fifthhorseman.net/wiki/apt/importing-keys
-"Instructions for adding dkg's key to apt")
+The repository is currently signed by [The Monkeysphere archive
+signing key](/archive-key), key id EB8AF314 (fingerprint: `2E8D
+D26C 53F1 197D DF40 3E61 18E6 67F1 EB8A F314`).  To cryptographically
+verify the packages, you'll want to [add this key to your apt
+configuration after verifying its
+integrity](http://wiki.debian.org/SecureApt).
 
 Once you've installed the packages, you might want to read up on how
-to get started [as a regular user](/getting-started-user), or [as a
+to get started [as a regular user](/getting-started-user) or [as a
 systems administrator](/getting-started-admin).
 
 ## Enhancements ##
@@ -31,10 +30,53 @@ system is that lenny's GnuTLS can't support the `monkeysphere
 subkey-to-ssh-agent` subcommand.
 
 You can install a patched version of GnuTLS to enable this feature of
-the MonkeySphere by adjusting the monkeysphere `sources.list` lines to
+the Monkeysphere by adjusting the monkeysphere `sources.list` lines to
 include the `gnutls` component.  So they'd look like this instead:
 
        deb http://archive.monkeysphere.info/debian experimental monkeysphere gnutls
        deb-src http://archive.monkeysphere.info/debian experimental monkeysphere gnutls
 
 You can [read more about this offering](/news/modified-gnutls-2.4.x-available).
+
+## Source ##
+
+For people who can't use the debian package, or folks who just want to
+look at the source, we recommend [using git](/community).
+
+But if you want a tarball of the most recent release, we publish those
+too.  The [latest
+tarball](http://archive.monkeysphere.info/debian/pool/monkeysphere/m/monkeysphere/monkeysphere_0.14.orig.tar.gz)
+has these checksums:
+
+<pre>
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
+checksums for the monkeysphere 0.15 release:
+
+MD5:
+8be275e5b5119921a536d8a67d3bfe24  monkeysphere_0.15.orig.tar.gz
+
+SHA1:
+65da0a047d935e856e2a0d7032dbbb339a3ce20a  monkeysphere_0.15.orig.tar.gz
+
+SHA256:
+44f3feb6e9f6921d2ed0406af4e3862f67da9261c8f00c7ea37cfea5031cbc77  monkeysphere_0.15.orig.tar.gz
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.9 (GNU/Linux)
+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+=AmW6
+-----END PGP SIGNATURE-----
+</pre>