[Haskell-cafe] GHC 7.6.3 (and others) hashes

[Roman Cheplyaka]

* Peter Simons <simons at cryp.to> [2014-02-15 15:54:57+0100]
> Hi Alexander,
> 
>  > Is there any where I can find SHA hashes for the official GHC builds?
> 
> I don't think the GHC folks publish such hashes anywhere. You might want to
> create a Trac ticket to that extend, because they really should, IMHO.
> 
> At the time being, there is no way for you to authenticate those binaries.

This is one thing I never really understood. Can someone explain it
to me? I suppose that SHA hashes are meaningless unless they are
PGP-signed by, say, Austin? So what's the advantage over distributing a
PGP signature for the tarball itself?

Roman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://www.haskell.org/pipermail/haskell-cafe/attachments/20140215/698532b1/attachment.sig>