Subject: Re: [boost] Providing means to verify integrity and authenticity for releases
From: Glen Fernandes (glen.fernandes_at_[hidden])
Date: 2016-03-14 07:48:38
On Mon, Mar 14, 2016 at 6:10 AM, Daniel Hofmann wrote:
> Can we please change this situation?
Sourceforge has been called out numerous times for its practices. It's
probably more reliable now to get a Boost release via The Pirate Bay
than the official download link.
> Here are some options that come to mind ordered by amount of effort:
> - Providing checksums
> - Educating users on the Downloads page
This probably won't be effective in my opinion. Many people see
checksums available but won't actually use them to verify anything.
> - Changing the hosting platform
A thousand times, yes.
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk