Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.
Haven't seen checksums for PWS files anywhere. Did see an old post from yrs ago, where Rony alluded to using them.
Are checksums still offered or included in some other files?
Each file has a corresponding .sig file, which is a checksum (hash) signed with my private key.
You can also see the checksum by clicking on the info (i) button on each file.
Finally, I put the checksums of the files in the release announcement of the version that goes our to the mailing lists:
Thanks. I'd guess a very low % of users know the info ('i') button on SF contain checksums. I've used SF well > 10 yrs & didn't know it / never saw mention of it (a description may be buried somewhere).
Like me, I'd guess most think the 'i' button is associated w/ the downloads graph beside it.
I even searched "checksums" on PWS & some other forums just now & found no mention of the info button / checksums.
Don't know if there's a way to make this more clear or add a note on the d/l page (for others benefit). Not everyone wants to sign up for mailing lists.
On PWS home page / downloads, no mention of checksums:
''In addition, you can get all the downloads (installer program, .msi format, zip file and source), including previous versions, from here.''
Quick check of several heavily d/l'd files on SF (> 10,000 / wk), many didn't have the info button. Nor an obvious checksum file.
You may have no ability to add a note on the SF d/l page, like "click info button for checksums." I could create an SF feature request.
Many users don't know how to use a sig file or don't want to go to trouble of using extra software. Most probably aren't concerned about file tampering - on SF - just that it's a valid d/l.