httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Graham Leggett <minf...@sharp.fm>
Subject Re: add chkdigest.pl to download.xml
Date Sun, 15 May 2011 21:26:24 GMT
On 15 May 2011, at 10:26 PM, Guenter Knauf wrote:

> I'd like to add:
> http://people.apache.org/~fuankg/chkdigest/
> as a cross-platform tool for verifying checksums to the last section  
> on download.xml - any thoughts?

The simplest way to check the checksum is to, using the operating  
system of choice, copy the output from md5sum (or local tool of  
choice) on the binary downloaded, and paste this into the "find"  
functionality of the web browser of choice while displaying the md5  
checksum of the file as published by us. If the md5 hashes match, the  
"find" will be successful.

This mechanism relies on software already present on and trusted by  
the end user's computer (within reason), and is simple to understand  
without introducing trust on a new tool.

Regards,
Graham
--


Mime
View raw message