search

stellar / new-docs

https://developers.stellar.org
MIT License
68 stars 132 forks source link

Download page with hashes of binaries #349

Open bartekn opened 3 years ago

bartekn commented 3 years ago

What problem does your feature solve?

Starting with Horizon 2.0.0 the build will be reproducible meaning that compiling from source on any machine will create exactly the same. binary. This is a security feature that will make binaries distribution safer.

What would you like to see?

A page in which we list download links with hashes of binaries. Similar to https://golang.org/dl/.

What alternatives are there?

Shaptic commented 3 years ago

Is this something we should/want to do on the developer documentation page? It's atypical to combine docs + downloads. We could (in fact should) include SHAs in the releases, @bartekn.

bartekn commented 3 years ago

This needs to be in multiple places but we must publish the hashes somewhere else then GH too. In case someone gains access to GH and can replace release's files it's easy to recompile and update the hash in release notes.