jakubgarfield / Bonobo-Git-Server

Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.
http://bonobogitserver.com
MIT License
1.81k stars 603 forks source link

Checksum for Downloads #725

Open prellele opened 7 years ago

prellele commented 7 years ago

It would be great to have a checksum for verify the integrity of a download.

Thank you for your help.

willdean commented 7 years ago

Bonobo is very simple to build from source, so if you're super-concerned about .exe tampering, then it would probably be better if you built it yourself. You can't really be trusting us to build a benign executable anyway, even if we upload a bunch of hashes which match the download.

What threat are you trying to mitigate, in case we do decide to do something useful here?

Nu11u5 commented 7 years ago

I think that @prellele is asking about having a checksum for when you download a file or branch from a repo within Bonobo.

willdean commented 7 years ago

@Nu11u5 Oh, right! That makes more sense, thanks.