Re: CGI scripts on www.octave.org broken

[Steve Lipa]

On Mar 31 Dmitri A. Sergatskov (address@hidden) wrote:
> 
> Perhaps the easiest thing would be providing MD5 signatures of the uploaded 
> files
> when you announce a new release...
> 

This is nice, but it only provides an indication that the file transfer
worked properly, which is probably addressed by FTP or whatever protocol
you use to transfer the file.  To get real security you need a digital
signature.   The digital signature is just as easy to produce as the
MD5 hash anyway.

Steve

-- 

Steve Lipa
address@hidden
gpg fingerprint = 8B68 77D7 9E09 9991 C97E  25FF 6A12 D2B9 EC7D 66C1