Re: 3.0.23 Fake or not?

Fabian Keil <[email protected]> Mon, 26 Jan 2015 13:01:49 +0100
Newsgroups gmane.comp.web.privoxy.devel
Message-ID <[email protected]>
Lee <[email protected]> wrote:

> On 1/25/15, Fabian Keil <[email protected]> wrote:
> > [email protected] wrote:
> >
> >> http://sourceforge.net/projects/ijbswa/files/Win32/3.0.23%20%28stable%29/privoxy-3.0.23.zip/download
> >>
> >> Is this version, 3.0.23, is legit?
> 
> Anyone have any good doc links to how to establish/verify PGP/GPG
> signatures _without_ going to a key signing party?  I'm thinking it
> would be nice if the Privoxy documentation had at least a reference to
> how to verify the software.

The Tor project has a "How to verify signatures for packages" page:
https://www.torproject.org/docs/verifying-signatures.html.en

I doubt that many users read, understand and follow the instructions,
though. For someone who has never heard of OpenPGP and the concepts
involved before, the instructions are rather complicated.

I agree that having such instructions anyway would be a good idea, though.

Fabian

------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Ijbswa-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ijbswa-developers
signature.asc (application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=/4Gg
-----END PGP SIGNATURE-----