> -----Original Message----- > From: Andrea Pescetti [mailto:pesce...@apache.org] > Sent: Tuesday, September 20, 2016 15:59 > To: dev@openoffice.apache.org > Subject: Re: Tools for building and checking a release candidate > > Dennis E. Hamilton wrote: > >> From: Andrea Pescetti > >> We are signing. ... Just, we do it in a way that Windows > >> doesn't like. > > > > It is not about Windows not liking the PGP signatures. It never sees > them. > > Sure. I wrote that Windows doesn't like the way we sign (detached), not > that it doesn't like the signatures. > > > To favorably compare a procedure that requires expert users to perform > manually seems odd to me. > > Just to be clear, and I have written it multiple times: > Windows-compatible signatures would be nice to have. On the other hand, > this would also need significant effort; and experience shows that it is > not a major priority for Windows users (we've received only a few > requests about it; Mac users, on the contrary, seem to ask for it more > often, probably because of a stricter behavior on Mac OS X). [orcmid]
So, there is no need to provide greater user protection because casual users don't [know to] ask for it? And the Operating System doesn't complain strongly enough? I think this would also give us more ability to discourage unscrupulous producers from wrapping AOO in their own .exe for their mercantile purposes, something that concerns us as a project. We fairly regularly have to request that users be certain that they get their downloads from mirrors that we feed. Most of all it demonstrates care in an observable form and is an aspect of being trustworthy. I agree there are activities that trump this, such as data-loss crashers, saved-file corruption cases, and security-vulnerability fixes. I think we should keep our eye on this. - Dennis > > Regards, > Andrea. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org > For additional commands, e-mail: dev-h...@openoffice.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
