Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add checkums to releases. #588

Closed
bmusin opened this issue Dec 25, 2016 · 6 comments
Closed

Add checkums to releases. #588

bmusin opened this issue Dec 25, 2016 · 6 comments

Comments

@bmusin
Copy link

bmusin commented Dec 25, 2016

Hi. Could you please add checksums to your releases? Thanks.

@GrayHatter
Copy link
Member

All releases should be pgp signed, this is a cryptographically secure checksum.

Did you have a different one in mind?

@bmusin
Copy link
Author

bmusin commented Jan 28, 2017

Could you please post a link? I didn't find, thanks.

@e0ff
Copy link
Member

e0ff commented Jan 28, 2017

Heres all of our releases: https://github.com/uTox/uTox/releases. In the download sections there are the signatutes. I also have added checksums to the latest releases.

@GrayHatter
Copy link
Member

done and done! thanks @endoffile78

@bltnkl reopen this if we missed something

@bmusin
Copy link
Author

bmusin commented Jan 31, 2017

And what about checksums for downloads(Linux) on links that are posted on main page?
It offers just a link, no mention of checksum
https://github.com/uTox/uTox/releases - there're now separate Linux releases with checksums too.

@GrayHatter
Copy link
Member

If you can replace a file, you can replace a checksum. You're not going to get better security than HTTPS, which everything from utox.io should already be.

If you'd like I can start signing the binaries as well. But again, if you can replace download via https with your own, you can also replace the key signature as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants