Whonix ™ can be downloaded over TLS (formerly SSL) and/or an onion service. Note that the TLS certificate authority (CA) system is seriously flawed and poses the risk of security breaches, therefore it should be avoided if possible.
As documented on the Verify Whonix Images page, OpenPGP verification is far safer and strongly recommended as an alternative to plain TLS.
The most secure method of obtaining Whonix ™ is to build it from source code. In this way, it is unnecessary to trust that developers have actually created binaries which match the source code. For utmost security, the source code can be reviewed beforehand.
For further information, see: Anonymity Operating System Comparison: Download Security.
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation.
Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee [archive] of the Open Invention Network [archive]. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)