[haskell-platform] #184: Security issue in installing Haskell platform in MS Windows - Installer not digitally signed
haskell-platform
haskell-platform at projects.haskell.org
Fri Aug 12 16:49:36 BST 2011
#184: Security issue in installing Haskell platform in MS Windows - Installer not
digitally signed
-------------------------------+--------------------------------------------
Reporter: gsngh | Owner: refold
Type: defect | Status: new
Priority: major | Milestone:
Component: Windows installer | Keywords: security vulnerability installer digital signature
-------------------------------+--------------------------------------------
The Haskell platform installer for Microsoft Windows should be digitally
signed using a certificate from a reputed certificate organization
(Verisign, entrust etc.) The mozilla firefox is signed this way. Any
software distributed through internet is signed this way to avoid
modification by replacement by an intermediary.
If it is not possible to sign the platform installer then publish the md5
checksum along with the link to download platform installer. (However,
windows users are slightly less used to this approach.)
--
Ticket URL: <http://trac.haskell.org/haskell-platform/ticket/184>
haskell-platform <http://trac.haskell.org/haskell-platform>
The Haskell Platform: a comprehensive and robust collection of Haskell libraries
More information about the Haskell-platform
mailing list