Use PGP.
I see the signatures, but where do I find the public key to verify against?
In the left side of the download page, it is under each username
Topic: Bug: Download page not secure (Read 702 times)
I see the signatures, but where do I find the public key to verify against?
In the left side of the download page, it is under each username
Use PGP.
I see the signatures, but where do I find the public key to verify against?
@rfugger:
If you're worried about the MD5 and therefore the application being tampered with, an SSL tunnel from a hacked server is not going to get you very far. Use PGP.
If you're worried about the MD5 and therefore the application being tampered with, an SSL tunnel from a hacked server is not going to get you very far. Use PGP.
Thomas is aware of the issue and has already confirmed SSL will be added to the site in the (near) future.
It would be far preferable if the page at
http://electrum.org/download.html
was secured by https so I could trust that the information given there, particularly MD5 checksums, has not been tampered with on its way to my browser. Thanks!
http://electrum.org/download.html
was secured by https so I could trust that the information given there, particularly MD5 checksums, has not been tampered with on its way to my browser. Thanks!
Jump to: