On Wed, Aug 23, 2017 at 12:04:46PM -0600, Aaron Toponce wrote:
> I noticed most software available on http://dl.suckless.org does not provide
> checksums and digital signatures for the compressed tarballs, and other files.
> I sought to remedy this, by creating a Github repository of only checksums and
> digital signatures. It's available at:
> 
>     https://github.com/atoponce/dl.suckless.org
> 
> Ultimately, it would be best if these were hosted on dl.suckless.org directly,
> but I figured I could help by hosting them here until they can get deployed.
> This is to help ensure that you have downloaded all the correct bits for both
> the software and the checksum.
> 
> Hopefully, this is of some value to the community and suckless users, such as
> myself.
> 
> -- 
> . o .   o . o   . . o   o . .   . o .
> . . o   . o o   o . o   . o o   . . o
> o o o   . o .   . o o   o o .   o o o

Hi,

Checksums are available in each project directory, yesterday I've added
SHA256 checksums.

For example:
        SHA256: http://dl.suckless.org/dwm/sha256sums.txt
        SHA1:   http://dl.suckless.org/dwm/sha1sums.txt
        MD5:    http://dl.suckless.org/dwm/md5sums.txt

HTTPs will be coming in a few weeks when some things are sorted. Maybe in the
future we can add also add PGP signed releases.

Please don't use an external github for this, it sucks.

-- 
Kind regards,
Hiltjo

Attachment: signature.asc
Description: PGP signature

Reply via email to