planetwatt.com

General Category => Feedback and Suggestions => Topic started by: notadmin on June 02, 2015, 06:18:49 PM

Title: Please serve checksum file over secure connection
Post by: notadmin on June 02, 2015, 06:18:49 PM

A better hash function would be appreaciated too.

Serving md5 hash over http is only useful to detect corruption during download but won't help detecting any kind of tampering.
Even using the Twitter of one of the mantainers as a source for the checksum would work, no need to set up https on the webpage (thought would be recommended).

Thank you for the great distribution.
Sorry for my english.

Title: Re: Please serve checksum file over secure connection
Post by: blaze on June 14, 2015, 03:40:28 PM

Has this really been a problem ever, for anyone here?