search

ariya / phantomjs

Scriptable Headless Browser
http://phantomjs.org
BSD 3-Clause "New" or "Revised" License
29.45k stars 5.76k forks source link

Sign the releases with GnuPG #13019

Open ariya opened 9 years ago

ariya commented 9 years ago

The source tarballs and binary downloads should be signed with GnuPG.

ghost commented 7 years ago

This is especially important, given that phantomjs.org is not served over HTTPS and PhantomJS cannot be built on older or low-end PCs. In other words: at the moment, prospective PhantomJS users with older or low-end PCs are forced to trust an un-signed binary downloaded over plain HTTP.