Re: [code] [textadept] Secure download and build

From: <xsek.att.openmailbox.org>
Date: Sat, 07 Nov 2015 18:35:51 +0000

Hi, thanks for that :) Could you go a bit further and make GPG keypair,
publish public one and sign that checksums file with it? For now ;)

On 2015-11-02 16:20, Mitchell wrote:
> Hi,
>
> On Sun, 1 Nov 2015, xsek.att.openmailbox.org wrote:
>
>> "Let's encrypt" is great, but not ready yet (two weeks to go though as
>> I remember). What could be done right now is archive of all sources +
>> gpg signatures of all archives + checksums in buildscripts. It is not
>> difficult at all.
>
> Thanks for bringing this topic to my attention!
>
> I'll need to investigate on this further before getting back to you.
> Until then you can make use of this set of md5 hashes I just computed:
>
> http://foicica.com/textadept/md5sums.txt
>
> You can use the 'https' variant of that URL if you like, but I'm not
> sure you'd consider it "secure" as the certificate is self-signed.
>
> Cheers,
> Mitchell

-- 
You are subscribed to code.att.foicica.com.
To change subscription settings, send an e-mail to code+help.att.foicica.com.
To unsubscribe, send an e-mail to code+unsubscribe.att.foicica.com.
Received on Sat 07 Nov 2015 - 13:35:51 EST

This archive was generated by hypermail 2.2.0 : Sun 08 Nov 2015 - 06:27:36 EST