Re: [Lynx-dev] Reply to would you be so kind to add

[Thomas Dickey]

On Thu, 25 Dec 2008, address@hidden wrote:

> Hi All
> I was at that page but there was nothing
> http://lynx.isc.org/signatures.html
> and i looked inside the zip but i did not find a checksum
> it would be a nice move if You could state some software

The page refers to "public key", has a title "PGP/GPG".

In the directories for both http/ftp, there is a ".asc" file that 
corresponds to each of the zip/tar files, e.g.,

     245 Dec 14 16:42 lynx2.8.7dev.11.zip.asc
     245 Dec 14 16:42 lynx2.8.7dev.11.tar.gz.asc
     245 Dec 14 16:42 lynx2.8.7dev.11.tar.bz2.asc
     245 Dec 14 16:42 lynx2.8.7dev.11.tar.Z.asc

Those serve as checksums.  You can verify them using "gpg --verify" for 
instance (there's some equivalent with pgp).  I use a script that calls 
"gpg --verify", which gives this type of output:

> gpg-verify lynx2.8.7dev.11.zip.asc
gpg: Signature made Sun 14 Dec 2008 07:42:31 PM EST using DSA key ID 688E31A6
gpg: Good signature from "Thomas Dickey <address@hidden>"

> that does the checksum checking automatically or a browser plugin(beyond 
> experimental status)
> again there are NO CHECKSUMS VISIBLE to me neither in the lst file nor in the 
> zip

The "CHECKSUMS" are the ".asc" files.

> sincerely;)
> Jan Girke
>
> ---------------------------------------------------------------------------------------------------------
> On Tue, Dec 23, 2008 at 4:04 PM,  <address@hidden> wrote:
> > checksums
> > 2 lynx to a program that eats
> > lst files preferably with checksums
> > for the little paranoid
>
> Every file is pgp signed.
>
> http://lynx.isc.org/signatures.html
>
> --
> Stefan
>
> ---
> Stefan Caunter
> http://search-optimization.ca
>
> -----------------------------------------------------------------------------------------------
> On Wed, 24 Dec 2008, Stefan Caunter wrote:
>
> > On Tue, Dec 23, 2008 at 4:04 PM,  <address@hidden> wrote:
> > > checksums
> > > 2 lynx to a program that eats
> > > lst files preferably with checksums
> > > for the little paranoid
> >
> > Every file is pgp signed.
> >
> > http://lynx.isc.org/signatures.html
>
> I'm puzzled by which files are referred to (I sign all of the tar-
> and zip-files).  The webpage isn't signed (I'm not that paranoid).
>
> --
> Thomas E. Dickey
> http://invisible-island.net
> ftp://invisible-island.net
>
>
>
>
>
>
>
>
>
>
> #adBox3 {display:none;}
>
>
>
>
>
> _______________________________________________
> Lynx-dev mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/lynx-dev

--
Thomas E. Dickey
http://invisible-island.net
ftp://invisible-island.net