Re: [dev] dl.suckless.org file integrity github project

From: Hiltjo Posthuma <hiltjo_AT_codemadness.org>
Date: Wed, 23 Aug 2017 20:21:45 +0200

On Wed, Aug 23, 2017 at 12:04:46PM -0600, Aaron Toponce wrote:
> I noticed most software available on http://dl.suckless.org does not provide
> checksums and digital signatures for the compressed tarballs, and other files.
> I sought to remedy this, by creating a Github repository of only checksums and
> digital signatures. It's available at:
>
> https://github.com/atoponce/dl.suckless.org
>
> Ultimately, it would be best if these were hosted on dl.suckless.org directly,
> but I figured I could help by hosting them here until they can get deployed.
> This is to help ensure that you have downloaded all the correct bits for both
> the software and the checksum.
>
> Hopefully, this is of some value to the community and suckless users, such as
> myself.
>
> --
> . o . o . o . . o o . . . o .
> . . o . o o o . o . o o . . o
> o o o . o . . o o o o . o o o

Hi,

Checksums are available in each project directory, yesterday I've added
SHA256 checksums.

For example:
        SHA256: http://dl.suckless.org/dwm/sha256sums.txt
        SHA1: http://dl.suckless.org/dwm/sha1sums.txt
        MD5: http://dl.suckless.org/dwm/md5sums.txt

HTTPs will be coming in a few weeks when some things are sorted. Maybe in the
future we can add also add PGP signed releases.

Please don't use an external github for this, it sucks.

-- 
Kind regards,
Hiltjo

Received on Wed Aug 23 2017 - 20:21:45 CEST

This archive was generated by hypermail 2.3.0 : Wed Aug 23 2017 - 20:24:27 CEST