Comment 6 for bug 1349715

Revision history for this message
Pas Besoin (pasbesoin) wrote :

Gunnar,

Thank you for the response. I did subsequently find and use that, although it is not an HTTPS delivered resource. I also note the availability of OpenPGP-signed hashes, although I think that is beyond the capability of many if not the majority of "mainstream" Ubuntu users, and I don't have a PGP implementation installed on the Windows computer I'm using at the moment.

I should have been more restrained, perhaps, in adding my prior comment to this issue. However, with the burgeoning security concerns these days also among the general population, I think it is helpful to encourage and support their being as proactive as possible. In other words, we *want* people checking against verified trusted hashes, delivered via HTTPS where the user is not yet comfortable with OpenPGP and tools that implement it.

I hope I was and am not annoying here nor overly pedantic, especially inasmuch as I am a new contributor to the conversation, here. Again, perhaps I should have waited longer and investigated further, first, and/or refrained altogether from commenting.

Regards