> Both are served directly by The Document Foundation's server

download.documentfoundation.org resovles to 89.238.68.185 via 'Google DNS' 
(8.8.8.8) via TLS over DNS.

AS34240
IRR Valid, ROA Signed and Valid
Prefix 89.238.64.0/18
Description: manitu GmbH

The SHA256 hash 
"76def06f2a8ecd5803dfbc63995e3963ae46b85e8c1c917541dedab81bd78169" is produced 
using Windows 11's "CertUtil -hashfile C:\Path.. sha256" command.

Does this appear correct to you?

On Saturday, December 21st, 2024 at 9:37 PM, Guilhem Moulin 
<[email protected]> wrote:

> On Sat, 21 Dec 2024 at 08:32:12 +0000, Sunny73Cr wrote:
> 
> > > Is that theoretic or are you saying the mirror tampered with the
> > > download?
> > 
> > Theoretical
> 
> 
> You can compare the checksums against the values from the .mirrorlist
> URL. And/or verify the detached PGP signature on the downloaded file.
> Both are served directly by The Document Foundation's server not via
> mirror redirection.
> 
> --
> Guilhem.
> 
> --
> To unsubscribe e-mail to: [email protected]
> Problems? 
> https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
> List archive: https://listarchives.documentfoundation.org/www/mirrors/
> Privacy Policy: https://www.documentfoundation.org/privacy

-- 
To unsubscribe e-mail to: [email protected]
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/mirrors/
Privacy Policy: https://www.documentfoundation.org/privacy

Reply via email to