Downloads

The Bureau maintains a small downloads section. Everything here is signed or verifiable against a published fingerprint.

Bureau editor PGP public key

Used for reader correspondence about corrections and tips. Not the Nexus operator key. Distinct.

The key is published on the About / Contact page. Fingerprint is available in this section on request through the message system on any Nexus mirror.

What is not downloadable here

The Nexus operator PGP key. Deliberately not published here to avoid becoming a single source that could be poisoned. Readers must fetch it from Dread and from a mirror /pgp path themselves and cross-check.

Screenshots of the storefront. Deliberately not published to avoid becoming a target for phishing clones trying to match specific visual details.

Any archive of vendor pages or listings. Deliberately not published because vendor pages are supposed to be checked live on the storefront, not from cached copies.

Why the source matters more than the version

A modified build behaves exactly like the genuine one right up until it does something you did not want, and nothing about the file reveals which you have. Downloading from the project itself removes the entire question. Software portals, mirrors, forwarded links and paid search results all reintroduce it, and a paid result for a browser download is a known distribution route for modified copies.

Verifying, which is the step people skip

The project publishes a small signature file beside each release. Checking it proves the bytes on your disk are the bytes they published, which is the one property you cannot establish by inspection. Import the key, run the verify command, read one line. A separate warning that the key is not certified with a trusted signature is normal and is not a failure, and abandoning at that line means abandoning after having succeeded.

What not to install alongside it

Nothing. No extensions, no ad blockers, no privacy add ons. The browser bundle is configured as a whole so that its users look alike, and every addition makes yours more distinguishable, which is the opposite of what it exists for. An extension advertising more privacy delivers less simply by being present.