Global check sum archive?
pinguin74 <[email protected]>
| Newsgroups | gmane.linux.suse.security |
|---|---|
| Message-ID | <[email protected]> |
There are still many applications or projects on the net that do not offer any digital signature or any other kind of verification. I think this is true for both Open Source and MS Windows. E.g. some Linux video drivers from video vendors. No signature, no checksum. I wonder, is there somewhere a kind of "global check sum archive" where people upload file names and corresponding hash sums? IMHO this would greatly hinder fraud. Is there such a project? Haven´t found one so far... Thanks
signature.asc
(application/pgp-signature, 455 B)
-----BEGIN PGP SIGNATURE----- iQEcBAEBAwAGBQJUJIl0AAoJEEbP47fJHDB66+IIAJFFJQpG2mL4w/6NK2QXvTOd FF8PLhCLMS9l3qSwBxjALGTS9541Y1EnaRrJDNPETHfwU1vkTxtGvG4T/vT6svTu VJYd8qDk9nFm9vPxjmHqQR+aBwgW+Agt9CRa/shPeOdXbDVD2Tla0hWGCJ7Gng+Y +w4+qJEKUfGuSOCOVehyhXXwhKMK4IktkaVtogbW7Oe0k5zwTt8OJpWNtbAKdO3y AXUtim1d2EOpJGYijkJi95/6khaBfNBqsW5G0mP/8tM0EZqfJUTCFBcWSABP83xM E9ioJ4r2zQhPTevo+fYRkin1Z+SBKaJzPP+vP4Bo2BZbfDb7grMQyJ+JUzRCnUM= =F3aW -----END PGP SIGNATURE-----