cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1995-10-03 - Re: Netscape finally issuing md5sums/pgp signed binaries ? (was Re: NetScape’s dependence upon RSA down for the count!)

Header Data

From: jsw@neon.netscape.com (Jeff Weinstein)
To: cypherpunks@toad.com
Message Hash: bd1b5f651cb8135174fcb2e5413541edf0bd65420029643392f3af314853ca0e
Message ID: <44qlhk$igc@tera.mcom.com>
Reply To: <9510030147.AA15570@dmsd.com>
UTC Datetime: 1995-10-03 06:34:59 UTC
Raw Date: Mon, 2 Oct 95 23:34:59 PDT

Raw message

From: jsw@neon.netscape.com (Jeff Weinstein)
Date: Mon, 2 Oct 95 23:34:59 PDT
To: cypherpunks@toad.com
Subject: Re: Netscape finally issuing md5sums/pgp signed binaries ? (was Re: NetScape's dependence upon RSA down for the count!)
In-Reply-To: <9510030147.AA15570@dmsd.com>
Message-ID: <44qlhk$igc@tera.mcom.com>
MIME-Version: 1.0
Content-Type: text/plain


In article <9510030248.AA08909@hplyot.obspm.fr>, dl@hplyot.obspm.fr (Laurent Demailly) writes:
> 
> On the topic of risks for a "major browser" to be tempered/targetted
> as a virus :
>
> I asked monthes ago netscape folks to make md5sum and/or PGP digital
> signatures (preferably md5sum of each files, this in a file, itself
> pgp signed) of the binaries available on their page and on relevant 
> newsgroup to reduce possibility of tempering.
> 
> [ok it won't help mythical joe six pack's but...]
> 
> Maybe I'll got more luck calling from here :-)

  I've been thinking about this recently for obvious reasons.  My concern
is that if someone can attack your download of netscape, they could also
attack your download of the program that validates netscape.  Is there
really any way out of this one?

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.

Thread