On 03/10/2016 04:28 PM, Bill Wright wrote:
> I am on the www.gimp.org web site, trying to download the current windows
> version. I have Windows 7 Home Premium. Running Microsoft Security
> Essentials.
> 
> When I try to download the software, from the "directly" button, I get an
> error message at the bottom of the window. When I click on "learn more" the
> attached window opens.

You're running into this:

https://bugzilla.gnome.org/show_bug.cgi?id=762640


Microsoft's reasoning is described in:

http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode-code-signing-and-timestamping.aspx


tkl;dr: installers signed with sha-1 are no longer considered signed at all


P.S. as a Windows user, I'd be concerned about the various "blocked"
statements in the enforcement details table

http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode-code-signing-and-timestamping.aspx#Enforcement_details

Bye, bye, old software?


-- 
Regards,
Michael
GPG: 96A8 B38A 728A 577D 724D 60E5 F855 53EC B36D 4CDD
_______________________________________________
gimp-web-list mailing list
gimp-web-list@gnome.org
https://mail.gnome.org/mailman/listinfo/gimp-web-list

Reply via email to