Re: Digital signatures and/or MD5 checksums

Wichert Akkerman <[email protected]>
Newsgroups gmane.comp.web.zope.plone.installers
Message-ID <[email protected]>
I sign all the plone source releases as well. Those signatures are only 
available through Launchpad though and not listed on plone.org - we should 
fix that.

Alex: is there some way PSC can handle signature for downloads?


Sidnei da Silva wrote:
> Alan,
> 
> We are already signing the Windows installers. Thanks for your idea though. :)
> 
> On Mon, Oct 6, 2008 at 1:44 PM, Alan Runyan <[email protected]> wrote:
>> Hi guys.
>>
>> I wanted to toss out an idea.
>>
>> Do we want to advertise md5 checksums for plone installers?
>> We could also digitally sign some of the packages.
>>
>> I would recommend the windows binaries to be digitally signed.
>> Enfold Systems has a digital signature.  This is a manual process
>> on our side.  But since releases only happen once per month -
>> its not a big deal.
>>
>> What other options are available on other platforms?
>>
>> In the Windows world.  People feel more comfortable
>> downloading software that has been signed.  It is also
>> considered "more professional" (fwtw).  I believe software on
>> Vista that is not signed will prompt you to accept the security
>> risk everytime you open the program.  Whereas if you install
>> a signed program - it never prompts you after the initial installation.
>> (Maybe sidnei can clarify the prompting behavior on vista).
>>
>> cheers
>> --
>> Alan Runyan
>> Enfold Systems, Inc.
>> http://www.enfoldsystems.com/
>> phone: +1.713.942.2377x111
>> fax: +1.832.201.8856
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>> Build the coolest Linux based applications with Moblin SDK & win great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> Plone-installers mailing list
>> Plone-installers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
>> https://lists.sourceforge.net/lists/listinfo/plone-installers
>>
> 
> 
> 


-- 
Wichert Akkerman <[email protected]>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.