[Pidgin] #15107: Need hash sums for Windows installer

Pidgin trac at pidgin.im
Thu May 10 15:10:27 EDT 2012

#15107: Need hash sums for Windows installer
 Reporter:  bobhPidgin      |        Owner:  EionRobb       
     Type:  defect          |       Status:  new            
Milestone:                  |    Component:  winpidgin (gtk)
  Version:  2.10.4          |   Resolution:                 
 Keywords:  download, hash  |  

Comment(by bobhPidgin):

 I stand corrected w.r.t sourceforge -- I went to the wayback machine and
 you are right that downloads have been from sourceforge for a while.

 But perhaps my sensitivity to possible tampering has been elevated in
 recent months, and I now consider publishing via sourceforge without the
 benefit of either hash sums or certifiable digital signature to be less
 than what best practice would suggest.

 To that end, if certifiable digital signature is out of the question, I
 hope you can see your way clear to establish a practice of publishing (on
 pidgin.im) the hash sums of the current installer.

 Thanks for listening.

Ticket URL: <http://developer.pidgin.im/ticket/15107#comment:2>
Pidgin <http://pidgin.im>

More information about the Tracker mailing list