From 9b427497385f5995fba2b93f6ecaf0a8ba911a8e Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Mon, 5 Aug 2019 15:50:43 -0400 Subject: [PATCH] releases: add spacing for ease of reading the html --- static/releases.html | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/static/releases.html b/static/releases.html index 2a545185..e8b1ce1e 100644 --- a/static/releases.html +++ b/static/releases.html @@ -97,8 +97,10 @@

These releases are available as both tags in the source code repositories and official builds.

+

The factory images are used for the initial installation and can be verified with signify. See the installation guide for details.

+

GrapheneOS uses automatic over-the-air updates, but full update packages are listed below for uncommon use cases like never connecting the device to the internet. A full update package can upgrade from any past version to the new version. The over-the-air @@ -106,12 +108,14 @@ but may be in the future once they're being used more consistently. Update packages are not for performing the initial installation and you should ignore incorrect guides trying to use them to install the OS.

+

The update packages have a internal signature verified by the update client (or recovery image when sideloading). Downgrade attacks are also prevented, and downgrades cannot be done unless a special downgrade update package has been signed with the release key. The internal payload for update_engine is also signed, providing another layer of signature verification and downgrade protection. Verified boot and the hardware-backed keystore also act as a final layer of protection.

+

Releases are tested by the developers and are then pushed out via the Beta channel. The release is then pushed out via the Stable channel after being tested by some users using the Beta channel. In some cases, problems are caught during Beta channel testing