There are GPG signatures at https://github.com/commercialhaskell/stack/releases <https://github.com/commercialhaskell/stack/releases> (the files with `.asc` extension) that can be used to verify, but we could add `.sha256` files pretty easily as well for future releases. Can you think of any reason we should _also_ include md5/sha1, or would just sha256 be enough?
> On Dec 15, 2017, at 2:12 AM, Jan von Löwenstein <jan.loewenst...@gmail.com> > wrote: > > Hi, > > actually the topic says it all. Either I missed the checksums to confirm my > download was ok, or there are no checksums. > > I feel like there should be a way to verify that download was not broken. > > Best > Jan > > -- > You received this message because you are subscribed to the Google Groups > "haskell-stack" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to haskell-stack+unsubscr...@googlegroups.com > <mailto:haskell-stack+unsubscr...@googlegroups.com>. > To post to this group, send email to haskell-stack@googlegroups.com > <mailto:haskell-stack@googlegroups.com>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/haskell-stack/a99fb41c-bc8a-4abe-9dc7-0542705012c3%40googlegroups.com > > <https://groups.google.com/d/msgid/haskell-stack/a99fb41c-bc8a-4abe-9dc7-0542705012c3%40googlegroups.com?utm_medium=email&utm_source=footer>. > For more options, visit https://groups.google.com/d/optout > <https://groups.google.com/d/optout>. -- You received this message because you are subscribed to the Google Groups "haskell-stack" group. To unsubscribe from this group and stop receiving emails from it, send an email to haskell-stack+unsubscr...@googlegroups.com. To post to this group, send email to haskell-stack@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/haskell-stack/663A7F44-A68A-4E50-9B9C-3CF08F0CEBDF%40fpcomplete.com. For more options, visit https://groups.google.com/d/optout.
