[Box Backup] Latest Boxi Win32 binary available for download

Achim boxbackup@boxbackup.org
Thu, 06 Aug 2009 01:41:16 +0200


Hello Peter:

On 05/08/2009 19:10, Peter Jalajas, GigaLock Backup Services wrote:
> Awesome!  Thanks for all the hard work, and the sha1's.   If I may
> suggest, to close the signature loop, if you could wrap the sha1's in
> your gpg signature, or sign the latest.zip and/or boxi.exe, that would
> protect us against your website getting hacked (again, no offense!).
> See how easy it is for me to ask you to do more work!   I'm like
> that...ask Chris.   Sorry about that!

I honestly think that signing the experimental binaries is NOT a good 
idea: On top of the additional hassle, it might imply some kind of 
consent or "guarantee" that I am not willing to give. These builds are 
not intended for production use, and your tests are hopefully run on 
closed systems anyway.

Whenever there will be a very stable version that is highly demanded 
(apart from the official RCs and Betas that Chris does), I will be happy 
to sign that one, but not every build that I put out in the mean time.

> I see your keys on http://pgp.mit.edu, would you be using one off them?
> Search results for 'latz achim'
> Type bits/keyID     Date       User ID
> pub  1024D/D1B4BF2A 2004-08-30 Achim J. Latz<achim@latz.org>
> pub  1024D/373CFB15 2002-01-19 Achim J. Latz<achim@latz.org>
> pub  1024D/C3F367BD 2000-02-17 *** KEY REVOKED *** [not verified]
>                                 Achim J. Latz<Achim@Latz.org>
>
> Of course we won't need any of that if we follow your thorough
> directions below!

These keys are outdated and should be revoked really.

> PS  In my New England American English, I've been pronouncing your
> name to myself at "ah-KEEM" -- am I close?

Useful website: http://forvo.com/word/achim/ [ˈaχiːm]

Achim