[Box Backup] Latest Boxi Win32 binary available for download
Achim
boxbackup@boxbackup.org
Thu, 06 Aug 2009 01:41:16 +0200
Hello Peter:
On 05/08/2009 19:10, Peter Jalajas, GigaLock Backup Services wrote:
> Awesome! Thanks for all the hard work, and the sha1's. If I may
> suggest, to close the signature loop, if you could wrap the sha1's in
> your gpg signature, or sign the latest.zip and/or boxi.exe, that would
> protect us against your website getting hacked (again, no offense!).
> See how easy it is for me to ask you to do more work! I'm like
> that...ask Chris. Sorry about that!
I honestly think that signing the experimental binaries is NOT a good
idea: On top of the additional hassle, it might imply some kind of
consent or "guarantee" that I am not willing to give. These builds are
not intended for production use, and your tests are hopefully run on
closed systems anyway.
Whenever there will be a very stable version that is highly demanded
(apart from the official RCs and Betas that Chris does), I will be happy
to sign that one, but not every build that I put out in the mean time.
> I see your keys on http://pgp.mit.edu, would you be using one off them?
> Search results for 'latz achim'
> Type bits/keyID Date User ID
> pub 1024D/D1B4BF2A 2004-08-30 Achim J. Latz<achim@latz.org>
> pub 1024D/373CFB15 2002-01-19 Achim J. Latz<achim@latz.org>
> pub 1024D/C3F367BD 2000-02-17 *** KEY REVOKED *** [not verified]
> Achim J. Latz<Achim@Latz.org>
>
> Of course we won't need any of that if we follow your thorough
> directions below!
These keys are outdated and should be revoked really.
> PS In my New England American English, I've been pronouncing your
> name to myself at "ah-KEEM" -- am I close?
Useful website: http://forvo.com/word/achim/ [ˈaχiːm]
Achim