[Haskell-cafe] GHC 7.6.3 (and others) hashes
mwm at mired.org
Sat Feb 15 09:45:32 UTC 2014
Hosting your own copy doesn't mean you can trust it. Read
just dl and hash it.
On Sat, Feb 15, 2014 at 12:11 AM, Alexander Solla <alex.solla at gmail.com>wrote:
> Hi everybody,
> I'm building up a body of SaltStack "states" for developing with and
> running Haskell web-apps. Since I am hoping my project will go big (don't
> we all?) I'm hoping to do things right, the first time (up to the
> constraints of marginal costs...)
> So, to that end, I'm trying to go a little overboard on the systems
> security front, since the costs are so low.
> Is there any where I can find SHA hashes for the official GHC builds? In
> particular, I'm looking for a hash for the file located at:
> I suppose downloading via an encrypted http connection goes a long way to
> mitigate MITM, etc. And I realize that long term, I'll want to host my own
> copy (and I will). But that is quickly sliding up the cost curve. Plus, I
> won't know if the copy I host will be okay unless I get the hash from a
> trusted source.
> Is there some place to get that hash?
> Haskell-Cafe mailing list
> Haskell-Cafe at haskell.org
Haskell-Cafe mailing list
Haskell-Cafe at haskell.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Haskell-Cafe