Boost logo

Boost :

Subject: Re: [boost] Providing means to verify integrity and authenticity for releases
From: Glen Fernandes (glen.fernandes_at_[hidden])
Date: 2016-03-14 07:48:38


On Mon, Mar 14, 2016 at 6:10 AM, Daniel Hofmann wrote:
> Can we please change this situation?

+1

Sourceforge has been called out numerous times for its practices. It's
probably more reliable now to get a Boost release via The Pirate Bay
than the official download link.

>
> Here are some options that come to mind ordered by amount of effort:
>
> - Providing checksums

Yes.

> - Educating users on the Downloads page

This probably won't be effective in my opinion. Many people see
checksums available but won't actually use them to verify anything.

> - Changing the hosting platform

A thousand times, yes.

Glen


Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk