Global check sum archive?

pinguin74 <[email protected]>
Newsgroups gmane.linux.suse.security
Message-ID <[email protected]>
There are still many applications or projects on the net that do not
offer any digital signature or any other kind of verification. I think
this is true for both Open Source and MS Windows. E.g. some Linux video
drivers from video vendors. No signature, no checksum.

I wonder, is there somewhere a kind of "global check sum archive" where
people upload file names and corresponding hash sums?

IMHO this would greatly hinder fraud.

Is there such a project?

Haven´t found one so far...

Thanks
signature.asc (application/pgp-signature, 455 B)
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAwAGBQJUJIl0AAoJEEbP47fJHDB66+IIAJFFJQpG2mL4w/6NK2QXvTOd
FF8PLhCLMS9l3qSwBxjALGTS9541Y1EnaRrJDNPETHfwU1vkTxtGvG4T/vT6svTu
VJYd8qDk9nFm9vPxjmHqQR+aBwgW+Agt9CRa/shPeOdXbDVD2Tla0hWGCJ7Gng+Y
+w4+qJEKUfGuSOCOVehyhXXwhKMK4IktkaVtogbW7Oe0k5zwTt8OJpWNtbAKdO3y
AXUtim1d2EOpJGYijkJi95/6khaBfNBqsW5G0mP/8tM0EZqfJUTCFBcWSABP83xM
E9ioJ4r2zQhPTevo+fYRkin1Z+SBKaJzPP+vP4Bo2BZbfDb7grMQyJ+JUzRCnUM=
=F3aW
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.