Add instructions for how to check signatures for i2p.jar #17
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Opened 10 months ago
Last modified 10 months ago
#2752assignedenhancement
Add instructions for how to check signatures for i2p.jar
Reported by:anonymous maybeOwned by:idk
Priority:
minor
Milestone:
undecided
Component:
www/i2p
Version:
0.9.46
Keywords:
Cc:
Parent Tickets:
Sensitive:
no
Description
Its better to add instructions for users to know how to check signatures for the downloaded i2p.jar
Subtickets
The verification process, including updating and dev keys requires urgent attention.
I agree with the OP as I have discovered in another issue, some sig options do not reveal signature details.
here:
https://geti2p.net/en/download
when someone download i2pinstall_0.9.50.jar for example he need to download keys as well and verify that this jar is authenticated one, but no instructions provided on this.
stuff similar to this:
http://bumz4sduzxzlobbgzy5fiufdflg3mo2jyecdwdx5rphrqldms7wlmiid.onion/interacting/verify-monero-binaries/
http://monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion/resources/user-guides/verification-windows-beginner.html
comment:3 Changed 10 months ago by zzz
Owner:
changed from sadie to _idk_Status:new →
assigned
OK. That's not "i2p.jar". Please be more clear in the description on what you are asking for when you open a ticket.
comment:2 Changed 10 months ago by anonymous maybe
Status:infoneeded_new →
new
https://geti2p.net/en/download
when user want to download i2pinstall_0.9.46.jar , there is "sig"
attached to every version (windows , mac , gnu).. this what im referring to.
comment:1 Changed 10 months ago by zzz
Status:new →
infoneeded_new
what signatures?
downloaded from where?