Project

General

Profile

Actions

Bug #1565

closed

Code signing for program installer to verify its authenticity

Added by Alivema 4ever over 9 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Immediate
Assignee:
Category:
Interface
Target version:
Start date:
08/20/2014
Due date:
% Done:

0%

Estimated time:
Operative System:
All
Regression:
No

Description

Since downloaded files tend to be corrupted, it's better for AdiIRC to include code signing. This is preferred way to verify program integrity on Windows.
You could get a free code signing for Opensource developers from Certum[[http://stackoverflow.com/questions/1177552/code-signing-certificate-for-open-source-projects]].

If this is not possible for some reason, it would be better to provide alternative way to verify downloaded installer, such as OpenPGP detached signature (.sig or .asc file), SHA256/384/512SUM, or at least MD5SUM.

By providing several ways to verify program authenticity, you are making sure that the integrity of program installer is authentic, so that users are worried by virus or malware hiding inside the program installer.

Actions

Also available in: Atom PDF