15 Feb
2014
15 Feb
'14
10:04 a.m.
* Peter Simons
Hi Alexander,
Is there any where I can find SHA hashes for the official GHC builds?
I don't think the GHC folks publish such hashes anywhere. You might want to create a Trac ticket to that extend, because they really should, IMHO.
At the time being, there is no way for you to authenticate those binaries.
This is one thing I never really understood. Can someone explain it to me? I suppose that SHA hashes are meaningless unless they are PGP-signed by, say, Austin? So what's the advantage over distributing a PGP signature for the tarball itself? Roman