On So, 2015-07-19 at 12:08 -0400, waldo kitty wrote: > On 07/19/2015 09:29 AM, Marc Santhoff wrote: > > On So, 2015-07-19 at 14:18 +0100, Martin Frb wrote: > >> I am not aware of them being separately published (except for the ones > >> on sourceforge, which are calculated by sourceforge). > > > > I think it may be only little effort to publish those sums on the > > website or put a file mdsums.txt aside wioth the downloads. > > ideally there would be one md5sum file for each individual file available for > download... this way, one can check the remote checksum file with a local one > to > see if the file has been updated since the checksums would be different... we > use this for automated update mechanisms...
Indeed, you're right. And then it would even better to have the archives signed with a gpg key of the developer(s) tracable to the root cert. But I wanted to keep things simple, not demanding too much. ;) -- Marc Santhoff <m.santh...@web.de> -- _______________________________________________ Lazarus mailing list Lazarus@lists.lazarus.freepascal.org http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
