[Freedos-user] verification checksums should be served over https

2017-01-14 Thread shaclacroi
The download page links to checksums at http://www.freedos.org/download/verify.txt -- but since this page isn't available over https, there's no way to confirm the validity of the checksums, since the page could be intercepted and modified by a man-in-the-middle attacker (https://en.wikipedia.org/w

Re: [Freedos-user] verification checksums should be served over https

2017-01-15 Thread shaclacroi
ably another half dozen easily implemented exploits. Heck, your browser can even become part of the MITM exploit. I'll intentionally misquote a saying I've heard about rules & law; "[Encryption standards] aren't made to keep the bad guys out; they're made to keep the go

[Freedos-user] verificati

2017-05-06 Thread SHACLACROI
From: shaclacroi --===8240708778682244841== Content-Type: text/html; charset=UTF-8 The download page links to checksums at http://www.freedos.org/download/verify.txt -- but since this page isn't available over https, there's no way to confirm the validity of the checksums,

Re: [Freedos-user] verifi

2017-05-06 Thread SHACLACROI
From: shaclacroi --===4246186708895111201== Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Louis,   There are a few important points to make in response to what you said   1) We're not talking about merely browsing; we're tal