[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Netscape finally issuing md5sums/pgp signed binaries ? (was Re: NetScape's dependence upon RSA down for the count!)
In article <[email protected]>, [email protected] (Laurent Demailly) writes:
>
> On the topic of risks for a "major browser" to be tempered/targetted
> as a virus :
>
> I asked monthes ago netscape folks to make md5sum and/or PGP digital
> signatures (preferably md5sum of each files, this in a file, itself
> pgp signed) of the binaries available on their page and on relevant
> newsgroup to reduce possibility of tempering.
>
> [ok it won't help mythical joe six pack's but...]
>
> Maybe I'll got more luck calling from here :-)
I've been thinking about this recently for obvious reasons. My concern
is that if someone can attack your download of netscape, they could also
attack your download of the program that validates netscape. Is there
really any way out of this one?
--Jeff
--
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
[email protected] - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.