Make clear that we ship non-free firmware
Technically, for the curious: we use Debian’s Linux kernel (that is
fully free), and install binary firmware from non-free on top of that.
The thing is, if Tails doesn’t work out-of-the-box on the computer(s)
they have available, most potential users will simply use something
else, that will 1. just work (“thanks” to the inclusion of binary
firmware); and 2. be less safe in the vast majority of
Also, most hardware that doesn’t
require proprietary firmware to be injected into it at runtime is
simply embedding such proprietary firmware, often in a read-only
manner. Not only this arguably doesn’t provide much more security than
injecting proprietary firmware at runtime, and it prevents hardware
vendors from fixing (potentially security-relevant) bugs in the
firmware once it’s been shipped to users.
This could be added to https://tails.boum.org/doc/about/license
Feature Branch: doc/9353-firmware