> > Are there any plans to sign Firebird installers, executables etc.? It
> > is my understanding that some versions have been signed in the past,
> > but signing is not always done. Can it be adopted as a general policy
> > to sign all distributions?
> >
>
> It's really funny. Sha256 checksums are provided for snapshot builds but not
> for
> releases.
SHA hashes are fine to validate downloads, but they are not the same as signing
the install kits/executable.
Windows has increasingly made it difficult to install and/or run non-signed
kits/executables.
Sean
Firebird-Devel mailing list, web interface at
https://lists.sourceforge.net/lists/listinfo/firebird-devel
