[haskell-platform] #184: Security issue in installing Haskell platform in MS Windows - Installer not digitally signed

haskell-platform haskell-platform at projects.haskell.org
Fri Aug 12 16:49:36 BST 2011


#184: Security issue in installing Haskell platform in MS Windows - Installer not
digitally signed
-------------------------------+--------------------------------------------
 Reporter:  gsngh              |       Owner:  refold                                            
     Type:  defect             |      Status:  new                                               
 Priority:  major              |   Milestone:                                                    
Component:  Windows installer  |    Keywords:  security vulnerability installer digital signature
-------------------------------+--------------------------------------------
 The Haskell platform installer for Microsoft Windows should be digitally
 signed using a certificate from a reputed certificate organization
 (Verisign, entrust etc.) The mozilla firefox is signed this way. Any
 software distributed through internet is signed this way to avoid
 modification  by replacement by an intermediary.

 If it is not possible to sign the platform installer then publish the md5
 checksum along with the link to download platform installer. (However,
 windows users are slightly less used to this approach.)

-- 
Ticket URL: <http://trac.haskell.org/haskell-platform/ticket/184>
haskell-platform <http://trac.haskell.org/haskell-platform>
The Haskell Platform: a comprehensive and robust collection of Haskell libraries


More information about the Haskell-platform mailing list