Return-Path: X-Original-To: apmail-httpd-dev-archive@www.apache.org Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1F0D44076 for ; Sun, 15 May 2011 21:28:21 +0000 (UTC) Received: (qmail 92902 invoked by uid 500); 15 May 2011 21:28:20 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 92798 invoked by uid 500); 15 May 2011 21:28:20 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 92790 invoked by uid 99); 15 May 2011 21:28:20 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 15 May 2011 21:28:20 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of minfrin@sharp.fm designates 72.32.122.20 as permitted sender) Received: from [72.32.122.20] (HELO chandler.sharp.fm) (72.32.122.20) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 15 May 2011 21:28:13 +0000 Received: from chandler.sharp.fm (localhost [127.0.0.1]) by chandler.sharp.fm (Postfix) with ESMTP id EE0D75C8020 for ; Sun, 15 May 2011 16:27:52 -0500 (CDT) Received: from [10.0.0.251] (87-194-125-18.bethere.co.uk [87.194.125.18]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client did not present a certificate) (Authenticated sender: minfrin@sharp.fm) by chandler.sharp.fm (Postfix) with ESMTP id 902795C8017 for ; Sun, 15 May 2011 16:27:52 -0500 (CDT) Message-Id: From: Graham Leggett To: dev@httpd.apache.org In-Reply-To: <4DD036DE.3070703@apache.org> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Subject: Re: add chkdigest.pl to download.xml Date: Sun, 15 May 2011 23:26:24 +0200 References: <4DD036DE.3070703@apache.org> X-Mailer: Apple Mail (2.936) X-Virus-Scanned: ClamAV using ClamSMTP On 15 May 2011, at 10:26 PM, Guenter Knauf wrote: > I'd like to add: > http://people.apache.org/~fuankg/chkdigest/ > as a cross-platform tool for verifying checksums to the last section > on download.xml - any thoughts? The simplest way to check the checksum is to, using the operating system of choice, copy the output from md5sum (or local tool of choice) on the binary downloaded, and paste this into the "find" functionality of the web browser of choice while displaying the md5 checksum of the file as published by us. If the md5 hashes match, the "find" will be successful. This mechanism relies on software already present on and trusted by the end user's computer (within reason), and is simple to understand without introducing trust on a new tool. Regards, Graham --