From: "Jason S Short, Ph.D." <[EMAIL PROTECTED]>

 >>Do you not provide for positive identification for binaries with md5sum
 >>or sha1sum or gpg signatures?

 >It's pretty simple.  If these are REQUIREMENTS for you, don't use the
 >system.
 >This is a user supported system (FREE).  If you MUST have it then I am 
sure
 >you can get commercial providers to charge you and provide that service.

Jason, all ,uppercased FREE,  software as you put it, that is worth its 
salt, provides
for md5 or sha1 checksums, at the least and some provide gpg signature 
files.

I would be glad to instruct you as to how to generate an md5 or sha1 
checksum, but this is so
trivial that "not" providing one detracts from your honesty.

Most responsible "Free" software provide md5sums, sha1sums and a gpg 
signature.

Such a lack of concern, puts the validity of "clamav-win32" in serious 
question.;

Go ahead and visit any properly published code.  They offer, md5sums, 
sha1sums and a signature.
Would it be so hard for you to honestly protect the code provided by the 
developers, or have some devious person inflict users with bad code that 
may ruin their system.

Seems to me that, the little time required to provide a more secure 
binary would be becoming
to a program that "proclaims" to ferret out bad programs.

Action and not excuses are called for.

Regards,
   D.Henman
--- end of Jasons mail
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Reply via email to