Re: Verifying Tomcat downloads

2023-11-03 Thread Christopher Schultz
James, Mark, On 11/3/23 12:33, Mark Thomas wrote: On 03/11/2023 15:45, James H. H. Lampert wrote: Forgive me if this might be a bit off-topic. But I haven't found a lot of resources on the subject (and that includes a search of List archives). For years now, I've been ignoring the note on th

Re: Verifying Tomcat downloads

2023-11-03 Thread James H. H. Lampert
On 11/3/23 9:33 AM, Mark Thomas wrote: Alternatively, come along to the next Community Over Code conference, take part in the key signing party and join the web of trust (or just use this as the excuse to come to the conference). And as a final option (I've done it once in 20 years) you can a

Re: Verifying Tomcat downloads

2023-11-03 Thread Mark Thomas
On 03/11/2023 15:45, James H. H. Lampert wrote: Forgive me if this might be a bit off-topic. But I haven't found a lot of resources on the subject (and that includes a search of List archives). For years now, I've been ignoring the note on the Tomcat download pages to verify the downloads, pre

Verifying Tomcat downloads

2023-11-03 Thread James H. H. Lampert
Forgive me if this might be a bit off-topic. But I haven't found a lot of resources on the subject (and that includes a search of List archives). For years now, I've been ignoring the note on the Tomcat download pages to verify the downloads, preferably by their PGP signatures, before putting