David E. Ross wrote:
A file of MD5 hashes is available via FTP when there is an update to
SeaMonkey itself. However, that file does not contain any MD5 hashes
for the partial .mar files.
Update uses its own hashes that are stronger, but we have them only in
the info on the update server, as users normally don't use the MAR files
directly. The update process uses stronger hashes and compares every MAR
file it downloads to those stronger hashes it gets from the update
server. That not only saves from corrupted downloads but also from
someone potentially putting faked files on a mirror server.
I know that the MD5 algorithm is now suspect. However, it does still
serve well for checking to see if a downloaded file was corrupted in
transit.
Yes, it should work well for that - and even also offer SHA1 hashes, BTW.
Still, to come back to the question of the OP, I don't know if the
Mozilla Add-Ons service creates or provides any hashes for those packages.
Robert Kaiser
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey
