15 Feb
2014
15 Feb
'14
3:04 p.m.
* Peter Simons <simons@cryp.to> [2014-02-15 15:54:57+0100]
Hi Alexander,
Is there any where I can find SHA hashes for the official GHC builds?
I don't think the GHC folks publish such hashes anywhere. You might want to create a Trac ticket to that extend, because they really should, IMHO.
At the time being, there is no way for you to authenticate those binaries.
This is one thing I never really understood. Can someone explain it to me? I suppose that SHA hashes are meaningless unless they are PGP-signed by, say, Austin? So what's the advantage over distributing a PGP signature for the tarball itself? Roman