incubator-flex-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Cole Ferrier <c...@coleferrier.com>
Subject Re: [MENTOR] InstallApacheFlex AIR app related questions
Date Tue, 17 Jul 2012 02:19:43 GMT
>From a crypto algorithm support, you might want to take a look at:

http://code.google.com/p/as3crypto/

project lacks development progress and support but in the past I've used
the library when I've needed one of the algorithms it supports.

Cole

On Mon, Jul 16, 2012 at 6:51 PM, Dave Fisher <dave2wave@comcast.net> wrote:

>
> On Jul 16, 2012, at 6:22 PM, Justin Mclean wrote:
>
> > Hi,
> >
> >>> 2.  The installer downloads the binary distribution of the Apache Flex
> >>> sdk.  Should the installer programatically verify the downloaded binary
> >>> file's signature before uncompressing it?
> >>
> >> That is a good idea. If you retrieve a KEYS file (and I'm not sure if
> that is a good idea) it must be from a different URL than the Binary.
> >
> > Initially would a simple MD5/SHA1 hash check be enough?
>
> Yes.
>
> > Not sure it's straight forward to check digital signatures in Flex/AS.
> Anyone have experience with this?
>
> Let's see what digital signature support eventually comes out of Infra.
>
> And yes it would be interesting to know what signature support there is in
> FlashPlayer and/or Flex SDK.
>
> Regards,
> Dave
>
> >
> > Thanks,
> > Justin
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message