Checksum Hash for Download Files

Got a request? Post it here. Please do not post bug reports here.
Post Reply
albeter
Posts: 28
Joined: Sun Aug 19, 2007 5:34 am
Location: Seattle, Washington

Checksum Hash for Download Files

Post by albeter » Fri Jan 19, 2018 11:52 pm

Would you please provide a Checksum Hash for each of your download files for security purposes?

Thanks

Erwin Denissen
Moderator
Moderator
Posts: 7350
Joined: Fri Oct 04, 2002 12:41 am
Location: De Bilt, The Netherlands
Contact:

Re: Checksum Hash for Download Files

Post by Erwin Denissen » Sun Jan 21, 2018 4:27 pm

If a hacker is able to get access to our web site to replace our install files, then he is also able to change the Checksum Hash, so that would only provide a false assumption.

We have our installers code signed, so you should always see a notice which tells you the installer comes from:
Verified Publisher: High-Logic. B.V.

If our installer is compromised, you'll see:
Publisher: Unknown
Erwin Denissen
High-Logic
Proven Font Technology

Alfred
Top Typographer
Top Typographer
Posts: 1006
Joined: Thu Apr 18, 2013 8:08 am

Re: Checksum Hash for Download Files

Post by Alfred » Fri Jan 26, 2018 1:20 pm

I've never relied on checksums for security. They can be useful for identifying a download as corrupt or incomplete, but if the file is digitally signed there will be a Digital Signatures tab in the Properties dialog, and you can check there to see if the signature is OK.
FC11.0 Pro (Help) + MT8.0 Pro (Help) • Windows 10

Post Reply