Please make tgz-archive verifiable

Brought to you by: mchbarnes, mick-p, milo_mindbender

#13 Please make tgz-archive verifiable

Milestone: Next Release (example)

Status: open

Owner: nobody

Labels: security (1)

Priority: 5

Updated: 2014-07-30

Created: 2014-07-30

Creator: Benedikt Wi

Private: No

Would it be possible to have the tgz-archive (collada-dom-2.4.0.tgz) being signed using GnuPG or another OpenPGP-compatible program? Downloading an unsigned file via http can be changed by anyone on the way from sourceforge to your own ISP, so you cannot be sure that there isn't someone injecting malicious code when you download the archive.

Please make tgz-archive verifiable

Group

Searches

Help

#13 Please make tgz-archive verifiable

Discussion