On Mon, 2025-11-24 at 23:29 +0100, Henrik Carlqvist wrote:
> On Mon, 24 Nov 2025 13:53:56 -0500
> Joe Flack <[email protected]> wrote:
> 
> > For example, imagine it is hosted at example.com/release/latest.
> > But there is no way to check the hash of that release. If there
> > was, then I could store the hash locally
> 
> Do you really need to care about a hash? Wouldn't the server
> timestamp be enough?
> https://www.gnu.org/software/wget/manual/html_node/Time_002dStamping.
> html

That works, IFF the server supports it.  Note from:
https://www.gnu.org/software/wget/manual/html_node/Time_002dStamping-Usage.html

> Note that time-stamping will only work for files for which the server
> gives a timestamp. For HTTP, this depends on getting a Last-Modified
> header. For FTP, this depends on getting a directory listing with
> dates in a format that Wget can parse (see FTP Time-Stamping
> Internals).

It also depends on that information being accurate... i.e. the server
doesn't perform arbitrary (non-update) operations that change the
modification time of its files.

But, if it works certainly that's a much more efficient solution, for
everyone!

Reply via email to