3 ms·
> signing the Putty executable But there's a GPG signature file which you can use to verify the download! How? I wouldn't know because I've never bothered. And
by noinsight 11y ago
> signing the Putty executable
But there's a GPG signature file which you can use to verify the download! How? I wouldn't know because I've never bothered. And if I remember correctly, the RSA key is also 1024 bits which is another no-no (this has come up before).
- ehPReth 11y agoTheir current release key is RSA 2048: http://www.chiark.greenend.org.uk/~sgtatham/putty/keys.html http://www.chiark.greenend.org.uk/~sgtatham/putty/keys.html
- deleted 11y ago[deleted]
- josteink 11y agoWhich is also not on HTTPS. I read this "old" piece about PuTTY the other day and it still seems just as absurd: https://noncombatant.org/2014/03/03/downloading-software-safely-is-nearly-impossible/ https://noncombatant.org/2014/03/03/downloading-software-saf...