Checksum for software authentication
Is there any place where we can see a checksum (e.g. SHA-256) of the downloadable files?
I'm running OSX 10.8, and I downloaded "MuseScore-1.3.dmg" from http://musescore.org/en/download/musescore.dmg, and I'm sure it works just fine, but it's generally unsafe to execute programs downloaded via plain HTTP, without some kind of authentication. Is there any way I can ensure that the .dmg file hasn't been tampered with?
(Unfortunately, simply providing the checksum here won't work, because this forum is itself served via HTTP...)
Comments
Thanks for raising this issue. We'll be adding the checksum and https support to musescore.org when we release 2.0.
Musescore.org has now https support, https://musescore.org. We'll provide the checksums for the coming 2.0 packages.
In reply to Musescore.org has now https by Thomas
I can't find the checksums. Are they really there yet? An official information about the sha256 checksum would be nice.
In reply to I can't find the checksums. by verpfeilt
See https://musescore.org/en/download
Or https://sourceforge.net/projects/mscore/files/mscore/MuseScore-2.0/ Click on the i next to the filenames
In reply to See by [DELETED] 5
Thank you, I didn't see that somehow.