search

luckyrat / KeePass-Favicon-Downloader

A KeePass plugin that downloads and stores favicons. A favicon is the little icon / logo used to identify many websites, typically displayed in the browser's address bar, bookmark list and on tabs.
70 stars 19 forks source link

The file is not signed and there are no hashsums #7

Closed johnnynoone closed 10 years ago

johnnynoone commented 10 years ago

There should be a way to verify integrity of KeePassFaviconDownloader.plgx . SourceForge uses plain HTTP, so someone might tamper with the file while it's in transit.

You can publish hashes here on github. It would be even better if you signed the hashes with PGP. :)

luckyrat commented 10 years ago

You can check the hashes on Sourceforge (via HTTPS): https://sourceforge.net/projects/keepass-favicon/files/1.8.0/

Just click on the "i" icon on the file you're downloading and then compare with the file you have downloaded.

johnnynoone commented 10 years ago

Oh, I didn't knew that. Thanks. :)