Re: [PHP] download security

2004-05-25 Thread Jason Wong
On Saturday 22 May 2004 19:15, mattias lundberg wrote: > Why isn't there any way to verify the authenticity of downloadable files, > like you can do on apache.org where there are PGP hashes for each file? > I know that there are MD5 sums on the website, but I can't assume that the > webpage is not

[PHP] download security

2004-05-22 Thread mattias lundberg
Hi! Why isn't there any way to verify the authenticity of downloadable files, like you can do on apache.org where there are PGP hashes for each file? I know that there are MD5 sums on the website, but I can't assume that the webpage is not spoofed. There doesn't seem to be any SSL connection to t