Re: [boost] Providing means to verify integrity and authenticity for releases

Subject: Re: [boost] Providing means to verify integrity and authenticity for releases
From: Glen Fernandes (glen.fernandes_at_[hidden])
Date: 2016-03-14 07:48:38

On Mon, Mar 14, 2016 at 6:10 AM, Daniel Hofmann wrote:
> Can we please change this situation?

+1

Sourceforge has been called out numerous times for its practices. It's
probably more reliable now to get a Boost release via The Pirate Bay
than the official download link.

>
> Here are some options that come to mind ordered by amount of effort:
>
> - Providing checksums

Yes.

> - Educating users on the Downloads page

This probably won't be effective in my opinion. Many people see
checksums available but won't actually use them to verify anything.

> - Changing the hosting platform

A thousand times, yes.

Glen