On Fri, Jun 06, 2008 at 01:03:19AM +0000, Dennis Clarke wrote: > Can the md5 sum hash for the various release files be published at the > main GCC release pages ? > If we look at http://gcc.gnu.org/gcc-4.2/ there is no md5 sum there > and while I can find that data at a mirror thus : > > ftp://ftp.mirrorservice.org/sites/sources.redhat.com/pub/gcc/releases/gcc-4.2.4/md5.sum > > .. there is no statement of the authenticity of that source file.
The versions on ftp.gnu.org are accompanied by digital signatures, which should give stronger assurance than just an md5 sum.
