Hi,
There is currently no easy way to check the validity of the Owncloud
release tarballs available at owncloud.org.
In order to increase safety/security of Owncloud releases, may I suggest
you the following points:
* add the md5sum and sha256sum of the source tarball to release emails;
* sign
On 10/09/2013 23:56, Frank Karlitschek wrote:
> Hi Tim,
>
> thats a great suggestion. I will check what we can do here to offer a
> way to check the integrity of the tar files. I will get back to you
> soon.
>
> Frank
>
> On 10.09.2013, at 21:44, Timothée Ravier wrot
On Wed, Oct 30, 2013 at 12:48 PM, Frank Karlitschek wrote:
> We also sign the downloads and releases from now on with an GPG key.
> The official ownCloud GPG key is attached to this email and will be linked
> on the website.
>
> http://download.owncloud.org/community/testing/owncloud-6.0.0beta2.ta
