Re: verifying authenticity of Omnigroup software

Wim Lewis <[email protected]> Tue, 4 Feb 2014 16:34:43 -0800
Newsgroups gmane.comp.graphics.omnigraffle.user
Message-ID <[email protected]>
On 4 Feb 2014, at 2:17 PM, Joe Malcolm wrote:
> Does Omnigroup publish md5/sha hashes or signatures for its software?
> It appears that the download link is http, not https.

Our appcast feeds (used by the software update functionality) contain cryptographic hashes of the file downloads, but I don't think the hashes are visible on our website.