Can't download Pidgin for Windows

[Knut Storvik]

How do I add a "Me too" as you said?
Sorry to ask, but I am not familiar with the ticket system.

When will you remedy the certificate hashing algorithm problem?
Even if people ignore it, it is a serious security flaw on your behalf.

-----Original Message-----
From: David Woolley [mailto:forums at david-woolley.me.uk] 
Sent: Saturday, April 9, 2016 11:16 AM
To: support at pidgin.im
Cc: knstorvi at online.no
Subject: Re: Can't download Pidgin for Windows

On 09/04/16 01:17, Knut Storvik wrote:
>
> Every time I try to download Pidgin for Windows, the download stops with
> a message about «The signature of «file» is damaged or not valid».
>
> Both main site and mirrors.
>
> What is wrong with the signature?

See <https://developer.pidgin.im/ticket/16971>.  You may want to add a 
me too.  It is strange that there have been no other reports, which 
suggests that people simply disregard Windows Smartscreen warnings as a 
matter of course!

This site 
<https://www.virustotal.com/en/file/70362ea2d318805ad8304953d0b302b3b0cfbc5a1f7cc56ffe844054f7e30c51/analysis/> 
reports that a file with that name and SHA256 checksum is safe according 
to all known virus checkers.

That checksum matches the one for the online installer that I just 
downloaded and it, the SHA1 checksum and the MD5 checksum match those 
reported for the file on multiple web sites.

These are all the checksums that I have obtained for the file:

david at dhcppc4:~/Downloads$ md5sum pidgin-2.10.12.exe
61f72dcff918bbbcd85476eea356c325  pidgin-2.10.12.exe

david at dhcppc4:~/Downloads$ shasum pidgin-2.10.12.exe
1112b1ec1c6145d6b416b492b6c203219bed6deb pidgin-2.10.12.exe

david at dhcppc4:~/Downloads$ sha256sum pidgin-2.10.12.exe
70362ea2d318805ad8304953d0b302b3b0cfbc5a1f7cc56ffe844054f7e30c51 
pidgin-2.10.12.exe

david at dhcppc4:~/Downloads$ sha512sum pidgin-2.10.12.exe
49962f3baf272bbaa9a328adf5a1e9957179875f33156332c34116cb93953ea8d4c3940d04686726857ba321509e84c5dc77357dfad4dc3c56f08a465f9cf745 
  pidgin-2.10.12.exe

Also note that this error doesn't happen until you have completely 
downloaded the file, as the signature is applied to the whole file and 
cannot be computed until the download is complete.