#184: Security issue in installing Haskell platform in MS Windows - Installer
not
digitally signed
-------------------------------+--------------------------------------------
Reporter: gsngh | Owner: refold
Type: defect | Status: new
Priority: major | Milestone:
Component: Windows installer | Keywords: security vulnerability installer
digital signature
-------------------------------+--------------------------------------------
The Haskell platform installer for Microsoft Windows should be digitally
signed using a certificate from a reputed certificate organization
(Verisign, entrust etc.) The mozilla firefox is signed this way. Any
software distributed through internet is signed this way to avoid
modification by replacement by an intermediary.
If it is not possible to sign the platform installer then publish the md5
checksum along with the link to download platform installer. (However,
windows users are slightly less used to this approach.)
--
Ticket URL: <http://trac.haskell.org/haskell-platform/ticket/184>
haskell-platform <http://trac.haskell.org/haskell-platform>
The Haskell Platform: a comprehensive and robust collection of Haskell libraries
_______________________________________________
Haskell-platform mailing list
Haskell-platform@projects.haskell.org
http://projects.haskell.org/cgi-bin/mailman/listinfo/haskell-platform
