Installer Zip File Hash?

Meddington / OutlookPrivacyPlugin

A PGP encryption plugin for Outlook 2010, 2013 and 2016.

BSD 3-Clause "New" or "Revised" License

272 stars 60 forks source link

Installer Zip File Hash? #131

Closed cyberis closed 8 years ago

cyberis commented 8 years ago

I'm a little surprised that you do not publish a hash of the installer zip file. I'm sure the installer is signed but how do I know the zip file wasn't corrupted during download without a hash of it. Seems like that would be a good idea. I didn't see this issue addressed before. Did I miss that?

Meddington commented 8 years ago

The code itself is signed and will not not run if corrupted. Shouldn't be any need to post hashes. Zip also has a CRC included in it to identify corruption.

I would recommend using https to download :)