From debbugs-submit-bounces@debbugs.gnu.org Thu May 26 16:26:33 2022 Received: (at submit) by debbugs.gnu.org; 26 May 2022 20:26:33 +0000 Received: from localhost ([127.0.0.1]:60102 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuK3x-00057W-OU for submit@debbugs.gnu.org; Thu, 26 May 2022 16:26:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:48014) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuHfG-0007TY-PM for submit@debbugs.gnu.org; Thu, 26 May 2022 13:52:51 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34462) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nuHfF-0002hI-5W for bug-gnu-emacs@gnu.org; Thu, 26 May 2022 13:52:50 -0400 Received: from mail-bn8nam11olkn20820.outbound.protection.outlook.com ([2a01:111:f400:7eae::820]:50977 helo=NAM11-BN8-obe.outbound.protection.outlook.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nuHfD-0005US-2O for bug-gnu-emacs@gnu.org; Thu, 26 May 2022 13:52:48 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Ko42V1miraN0Xw1vigVUc9uagcypPn9lfLorST/36jm9rhdBw4yKIUIFDbxK0pjZodUnXqxT9Vnls0dszGUJVBCjjkD3CwDyG/EFx9FypnBS4MA9gHUbDqJ/I4WeWRbfMSUe93+ba4E4XV3ovMMwgiR3b6pYem4bu57oypkfBxF/qp6tVwOev5QCuY2GlbW/tXZrAvXU7/pfm2aSQABd/XTh9bEIi2UdGlQolIbG2IDI0n2emnUu910H8r9NzTajUqKmerR26qcv+y5RQjchJeNLmaVoqyJkn9ODaKo5zhETfF8klUXoGELJ4+BU77dqqapcMAAjiD57CL3sufhdkw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=n1Vt4OSna+MXZg+H2Wh72Xn9O4xGgmfHnIR3mFPbrUI=; b=AghEAcpNdmgk/r4mbi0ZXJJZNAjyacHQ0l8yBOqjVR+jiPfIWMbEBYiyup4ShpUUzamp+ThitjKlYtWtd7PR4o5y2SMfpLbr4nivotwTWej5zN20LCoocuJTOa/2mBH2rzLMXy7JiAL4O8GXkd9QQsbfrqwKvL8FXpNT0CZpWWC3DUL60LTB6k+BI06taz897kEUtYLF9LPuf7xhVqbnnp/qYmNChyuNB3KYqPqr4HEQxKvu4LiG9oypiGiopdcjDG3UAizVL7xXYv8BZDVzxL3FYXxfIz7M5QlP0egoeV/P380tk6iCthm2PqVmQ5KU7JP4Pvp/TtqMs+VXfIFI/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n1Vt4OSna+MXZg+H2Wh72Xn9O4xGgmfHnIR3mFPbrUI=; b=JFK3PnK8RfkrFaL9nWl6n/JGLEQss8ImHe6IT2eB0bA11hJClJPsPUGFKNuz68OgxL6mNWZN2xxKHTNHAlqakS2AkklcevCIG3y5KEOb1HlECR8htGWuoKNUqjrbKo1mmbPpCwNbjLJdEXJpc/vBDxYumARj18v6X8/20/qsH7sQtLptfxRnr3TA5dm//KXS9w2A2jQFPOlBKG/bM5xTxxTKOo0fyb98MUqt6gJqVqg3HaZTerdkUEsCdch+94swvOUIlAI0MB5vW9U7Bfw6jCQt8Os3j4db9DRKT51/vCJLcOlHpMnbyQajfuWcgNfJa/BhJtWQsMoQKxpa8natPQ== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by BY5PR19MB3521.namprd19.prod.outlook.com (2603:10b6:a03:1bb::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.13; Thu, 26 May 2022 17:47:41 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::dda:60b1:cc25:476d]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::dda:60b1:cc25:476d%7]) with mapi id 15.20.5293.013; Thu, 26 May 2022 17:47:41 +0000 From: Ali Elshishini To: "bug-gnu-emacs@gnu.org" Subject: enhancement request - SHA-256 for emacs downloads Thread-Topic: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXQ== Date: Thu, 26 May 2022 17:47:41 +0000 Message-ID: Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: 8d19ed06-4381-366a-5af9-721130a9a6e0 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [BdW77MuBqlj5raQ5S3+NGzVm7MrEPyBal9P/1WiX4Oc=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b6538a64-f005-4ec7-e43b-08da3f3fd517 x-ms-traffictypediagnostic: BY5PR19MB3521:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?R4/f6a4ece7fKQP5basaU6k7O3lEc3lzOyXcM+HuadRx9TX5g4ZgtFowfl?= =?iso-8859-1?Q?HYyys9LQUEI57e0eLRp7LABpQRlAkxthTpsgA/6T3TV4WjeWyf5OJczEk4?= =?iso-8859-1?Q?ZfOSCyyC4zlifrjwjGudNWjcL8nCDQm1ccejjiyKFSO127yg679Ze7wiEL?= =?iso-8859-1?Q?vK5LvGpIwW/pTrWsN0f9VRo11V1ys7Ml8hwteFE1LxZZFzSzYYWVufziqj?= =?iso-8859-1?Q?jTRWMKvU5ATRsfDHG5UHBw9aJQyyhGhzbIlFcZKGAnBnMNoZeE54OtIJzj?= =?iso-8859-1?Q?jrcHQyI8u1ZhNCakTZk/DL27oawyIy6SacXYpiwu6QkCqDihNKv6sB8Si4?= =?iso-8859-1?Q?SRuZnmi8JBAriR/0By0J2rqrIMyry7leWhC920zbB9l0qVdejrw9L5QJ76?= =?iso-8859-1?Q?g+q0JUR4qfPB5nGwjnwqZsrfjjYlIPCsYWV+cGyY5otjdNE9afcbZfFwhM?= =?iso-8859-1?Q?7+oxl6Mzp7xafFodZhZ1CeAo82GcjSg5BOx7S+9titnlojmaQUJsQuHhsj?= =?iso-8859-1?Q?NofNgv71qqZu3gucrS5nXrHieoDsXDHx7RJUZBYZpsOwbXmYyjlDyIrp7H?= =?iso-8859-1?Q?MuDV8fLDFcOd/uTBLl2y6XUwzGRm0jggPVrs//xpiot3hb5IPI6Wnhs4ET?= =?iso-8859-1?Q?sVTRqDka4WKaqFIQCeNfMYbmm3VS3+dzWVwxuRreQZ2VlER1j2TFKO85OU?= =?iso-8859-1?Q?BGO/F8rg3vLinoUj1jk+L9Q4kKIkQse/DUn57MRI5GAIP1KhjCPBX9vPt/?= =?iso-8859-1?Q?5AQuv6HKkz0OeQQc8TIi0gOfO/YE/KaNhpjrP18g6E+nudTxIoYMzEyUBA?= =?iso-8859-1?Q?kgvO/YPUhDzwqOG0/SJ3eNy6+d53ew5mSNyvy4TqnM16M2Wi+V6r9h5HXS?= =?iso-8859-1?Q?WFhDJuRzTuru3keHwVnVMd35UTODSFfJJBNwQ9kC2Sdz++41e3Njk6ygN5?= =?iso-8859-1?Q?uHBMF3Hq38cOrTbePXxDmQTaCgkxrD93un9VS6+UN8SFv4LGG0Lalj7YWM?= =?iso-8859-1?Q?YF7MihEQ5if+aYwUwewiH6F1IUUCQhQwJHl/XZGJHvwodOz3cj9McBG2Sj?= =?iso-8859-1?Q?uQL7Ka4rGMMw0s3fh4Rby1Fo3M8twO7uPkjJGZH1MkvVVcPlnZhqrCU8+E?= =?iso-8859-1?Q?lYvf+mG892YwyaKF48BPHrBAENJUK80kKhZgTGGQGQBa9hkmwGAzZls8Gf?= =?iso-8859-1?Q?4BzDQjEPvgHJA9fHsND34Qk0M7PKRhxwaKeu3IBvBZxau2TMSQtWzDNacy?= =?iso-8859-1?Q?UIs1U4Lh7VfkwjFZCfHknommerFK7rDpbb5S/MUsgpzgGidyAM08bTI7zM?= =?iso-8859-1?Q?ij6pPvi6IzEZuXN3cv+cYNdkNYGizAXSjm+6dsmLuesuUxEeIaYhehjFE2?= =?iso-8859-1?Q?U9ZSSOWIC7ii7sL1Iro5Pj7CZAJp6kl3jBf+dzSzjjZR0Cs5RkLj7uBGjD?= =?iso-8859-1?Q?jWM78uOkFUE8UFPIQAGaGxbntxKyJQdFahmzYnikOmee/QUTHmihjUK9jy?= =?iso-8859-1?Q?U=3D?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB4680BF5EC16D15C78F7ABE18DBD99DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: b6538a64-f005-4ec7-e43b-08da3f3fd517 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 May 2022 17:47:41.6636 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR19MB3521 Received-SPF: pass client-ip=2a01:111:f400:7eae::820; envelope-from=shishini@outlook.com; helo=NAM11-BN8-obe.outbound.protection.outlook.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.2 (/) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Thu, 26 May 2022 16:26:28 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --_000_DM5PR19MB4680BF5EC16D15C78F7ABE18DBD99DM5PR19MB4680namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi May you please include a list of SHA-256 hashes for the downloads in https://www.gnu.org/software/emacs/download.html This will provide an easy and secure way to verify downloads Please note that the experience to verify the signature on windows is very = poor and it for me at least ended up with the file nor being verified because of= missing public key A SHA-256 hash will be a simple solution Thanks Ali --_000_DM5PR19MB4680BF5EC16D15C78F7ABE18DBD99DM5PR19MB4680namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi

May you please include a list of SHA-256 hashes for the downloads in <= br> https://www.gnu.org/software/emacs/download.html

This will provide an easy and secure way to verify downloads
Please note that the experience to verify the signature on windows is very = poor
and it for me at least ended up with the file nor being verified because of= missing public key 

A SHA-256 hash will be a simple solution

Thanks
Ali 

--_000_DM5PR19MB4680BF5EC16D15C78F7ABE18DBD99DM5PR19MB4680namp_-- From debbugs-submit-bounces@debbugs.gnu.org Fri May 27 06:59:37 2022 Received: (at 55666) by debbugs.gnu.org; 27 May 2022 10:59:37 +0000 Received: from localhost ([127.0.0.1]:32878 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuXgv-0000W1-MA for submit@debbugs.gnu.org; Fri, 27 May 2022 06:59:37 -0400 Received: from quimby.gnus.org ([95.216.78.240]:39274) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuXgt-0000Vj-Q7 for 55666@debbugs.gnu.org; Fri, 27 May 2022 06:59:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=d1pKsq/bZ/Hb+z5ab0qPkKl3IaJlCN22p9aflz3Zx3Q=; b=TE7zgykwKXUZpuRAvheQ+tgD4X jPMXyfqfvoGdn65yqVFTChV9JQWBEWlXQO3Z+3wbg6Kkt2BrIaxVKoHpRIr05pIKxujRq552bP9lE r1sJqi3angZA+UfiJYUT0GP9SnmBV4pgCvrwwIY+N8/a+KTFZNlQP1adMQlh6K4UmQcs=; Received: from [84.212.220.105] (helo=xo) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nuXgk-00079I-Co; Fri, 27 May 2022 12:59:29 +0200 From: Lars Ingebrigtsen To: Ali Elshishini Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads References: X-Now-Playing: Cris Williamson's _The Changer and the Changed_: "Hurts Like The Devil" Date: Fri, 27 May 2022 12:59:25 +0200 In-Reply-To: (Ali Elshishini's message of "Thu, 26 May 2022 17:47:41 +0000") Message-ID: <875ylr8cmq.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Ali Elshishini writes: > May you please include a list of SHA-256 hashes for the downloads in > https://www.gnu.org/software/emacs/download.html > > This will provide an easy and secure way to verify downloads > Please note [...] Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 55666 Cc: 55666@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Ali Elshishini writes: > May you please include a list of SHA-256 hashes for the downloads in > https://www.gnu.org/software/emacs/download.html > > This will provide an easy and secure way to verify downloads > Please note that the experience to verify the signature on windows is very poor > and it for me at least ended up with the file nor being verified because of missing > public key > > A SHA-256 hash will be a simple solution That would require people to edit that web page every time they generate a package, which would be error prone and require too much work of the people who build the packages. The packages are signed, which I think should be more than sufficient, so I'm closing this bug report. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Fri May 27 06:59:42 2022 Received: (at control) by debbugs.gnu.org; 27 May 2022 10:59:42 +0000 Received: from localhost ([127.0.0.1]:32881 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuXgz-0000WP-Ti for submit@debbugs.gnu.org; Fri, 27 May 2022 06:59:42 -0400 Received: from quimby.gnus.org ([95.216.78.240]:39286) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuXgy-0000Vr-2J for control@debbugs.gnu.org; Fri, 27 May 2022 06:59:40 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=v9XRxe6BxOkJ6+hrJcxDdDcRDgjhVa/pl2pKoHPZSKY=; b=UtGzQkuWTvHD0X6+9j09kAVKvw W+9MNA09foO9RC8IGJMR0x80la2C/BhBEqiKt7D5JQFrY85pDxjqDkEDKNRBEznNPrFuHt0VdI+Ua oMIRAg5IjnMwgVgqSHbFttV1f/OOer2DeSMb+94O08vmu5Pe7sEcFaeLXBU5Ar+hljFg=; Received: from [84.212.220.105] (helo=xo) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nuXgq-00079P-8i for control@debbugs.gnu.org; Fri, 27 May 2022 12:59:34 +0200 Date: Fri, 27 May 2022 12:59:31 +0200 Message-Id: <874k1b8cmk.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #55666 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: tags 55666 wontfix close 55666 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tags 55666 wontfix close 55666 quit From debbugs-submit-bounces@debbugs.gnu.org Fri May 27 08:29:00 2022 Received: (at 55666) by debbugs.gnu.org; 27 May 2022 12:29:00 +0000 Received: from localhost ([127.0.0.1]:33016 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuZ5Q-0000tz-6n for submit@debbugs.gnu.org; Fri, 27 May 2022 08:29:00 -0400 Received: from eggs.gnu.org ([209.51.188.92]:35090) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuZ5N-0000tk-U3 for 55666@debbugs.gnu.org; Fri, 27 May 2022 08:28:58 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52426) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nuZ5I-000467-4P; Fri, 27 May 2022 08:28:52 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=yKwXPM1BS2pIko/4ZrOlTt6VM2LDdhOKHZ98ANQV76k=; b=erqN27OVtjxq 6CcvLJuGV1XRdxuDsUe5X1njRoCW0XMiZwZi3Vt1xvUYEDD0VV7PMLFXx9Q3fvCZxSHI7IRWX+rxW 8hfwRsRYXkj0Uh60r6lnjb8L+Fz9M+aYdNuh9MZu0vNw8Gbulcp1xrBNv8LAw7kUs3pCw5bN3GOG1 1kYFD7kuOtqZEMueQgPyoLMe65t4XB0dtaK82Gm4ZGwM/l93LEAdMLGxTgYOSU2sKW58/UkoUP6WY Eqr73FZL241weMKFDNepP3oi2KUYpS7S2kDM1Ohd85rKpooYWvLuZw1Btc2hQ1TFZA4VGF1CT9euG hUprqF1hSC+yQqy0d9SZTw==; Received: from [87.69.77.57] (port=3898 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nuZ52-0005pV-Jp; Fri, 27 May 2022 08:28:47 -0400 Date: Fri, 27 May 2022 15:28:32 +0300 Message-Id: <835ylrnor3.fsf@gnu.org> From: Eli Zaretskii To: Lars Ingebrigtsen In-Reply-To: <875ylr8cmq.fsf@gnus.org> (message from Lars Ingebrigtsen on Fri, 27 May 2022 12:59:25 +0200) Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads References: <875ylr8cmq.fsf@gnus.org> X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 55666 Cc: 55666@debbugs.gnu.org, shishini@outlook.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > Cc: 55666@debbugs.gnu.org > From: Lars Ingebrigtsen > Date: Fri, 27 May 2022 12:59:25 +0200 > > Ali Elshishini writes: > > > May you please include a list of SHA-256 hashes for the downloads in > > https://www.gnu.org/software/emacs/download.html > > > > This will provide an easy and secure way to verify downloads > > Please note that the experience to verify the signature on windows is very poor > > and it for me at least ended up with the file nor being verified because of missing > > public key > > > > A SHA-256 hash will be a simple solution > > That would require people to edit that web page every time they generate > a package, which would be error prone and require too much work of the > people who build the packages. > > The packages are signed, which I think should be more than sufficient, > so I'm closing this bug report. In addition, one can find the SHA values in the announcements made on info-gnu-emacs. Here's the one about Emacs 28.1: https://lists.gnu.org/archive/html/info-gnu-emacs/2022-04/msg00000.html You can similarly search for announcements of the older releases. From debbugs-submit-bounces@debbugs.gnu.org Fri May 27 10:42:33 2022 Received: (at 55666) by debbugs.gnu.org; 27 May 2022 14:42:33 +0000 Received: from localhost ([127.0.0.1]:35596 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nubAd-00055e-Me for submit@debbugs.gnu.org; Fri, 27 May 2022 10:42:33 -0400 Received: from mail-dm6nam11olkn2092.outbound.protection.outlook.com ([40.92.19.92]:24353 helo=NAM11-DM6-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nuYQ6-00064u-7U for 55666@debbugs.gnu.org; Fri, 27 May 2022 07:46:21 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VdubIdXOw8rg+9+eKco+ay0XbVr1C6y3wrIIDG7zI2E4zfOWgfLp1t9X6lcFudfGdqHEuTxkto/RF9En7VBd6zz7BSuGJKitYr31DtHf2nn1RquYHw0CZFZyWlDdnJg80+TtiZpk87RrFXlAtYgxPu+w6Oi60Se6YLy607lmzVxa2KoF3QikWQvDblAECw8LgKuhFHMa4taUbmEuSxkLAXdZ9Xr/cZBfONPn0SexLSJqq2Vq/tGxbn8rYy8+/+y70HsKF68mqXK307q8Bcq8Bx1jXOW5aEenv1i2Z8CJGhQAHlsVYUFcZpfTBHnApgSwJzamMlLfF1aZVcOvTuPB3Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xEOlHV1Ta6x4m8Tc9mROfIymMEglMd8cx/yFO2VPHCg=; b=YzcHOgtrREP+nm6teda3vLjM4kcIUbTakDdsoVVDCQ3LIJ7yXVwWjKrimPsVh9xCf1w8qEXrM9ByozyGQTfV/+zk8JejXCoKeNIurBXVpfSQtpav4DxpddtV4Y//m6+IdC9QixpGZ8+qQtL2eFstAdcqD4yOZ+79ZitF2XiE9ikFd8FE6EMFeIeP2HRWqgTuIY0MGEm3q1OXcxOaJ40EcgICdTem+McLW9wH/EopZm7VnOetAlpWF02MUa8O2tdYEBtWdXcjvZnaeMW834+IJ4yVNs4Nwyt1OHsX7qxLaw0KOY0ipyKFEI4gL5uzFmvtZYNa2hyKO4xj5ySDo3150A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xEOlHV1Ta6x4m8Tc9mROfIymMEglMd8cx/yFO2VPHCg=; b=bZyBIlHYNaZ5PA/fTxEgaSPdFxDKGt68OvPclLg1oyssBWvVpSg4P9z2SmwdeuLx1VVcWSgGGsn9yTYRiTRdHpbBjDtt02g4OgpIJVKNAGQMByHUI8j07PvVAN3FTH/3fA63FexTpwK3LAXVuzb8RQuEQR9A9fCY//pribYA5tEgpS7mvbG6mgCYSoAjCTtGRxuO7X0N3x3HAHl9vJoZO2gcEzVGaEU277JW7ovZIW+spBZSPY0TNOPW8RjqpQolCpLLN3T9GvUQAJ3z0uZkWop8ehSLfhScP3fr9eNt8D5EA8+XguzjHDLmntpanYnlBfJieYFPy75QlCXZFwtzRQ== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by DM6PR19MB3321.namprd19.prod.outlook.com (2603:10b6:5:19d::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.15; Fri, 27 May 2022 11:46:11 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::dda:60b1:cc25:476d]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::dda:60b1:cc25:476d%7]) with mapi id 15.20.5293.013; Fri, 27 May 2022 11:46:11 +0000 From: Ali Elshishini To: Lars Ingebrigtsen Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAKTas= Date: Fri, 27 May 2022 11:46:11 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> In-Reply-To: <875ylr8cmq.fsf@gnus.org> Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [XlyWVGuMEo2TYolaRFNr/pmFzRsHq5wwwqzkN1Mg0FU=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 49809133-b48d-4462-999f-08da3fd67f42 x-ms-traffictypediagnostic: DM6PR19MB3321:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?qh32t5GkKHi4mPwexGeNNo0BMGxvW8oR3Vs5KuRA+EI/oMuii/uUK723zRRs?= =?us-ascii?Q?b3/Jms0f2+lcFmrPnXGkWPn252liCIorvM0N4Q8XKynSD1J/hyuNywSZZCr4?= =?us-ascii?Q?R7ALqwN2+F9q98t0J5pPOKAb0LWp/k/PYjwpczrMpgnwNsuqbG1cwEVAwyOq?= =?us-ascii?Q?eiPameQrNvdFqV0BPe1VS1uEH9gaymeeoXGghjup6T7vJ8qqVcZ2vI6/ntl/?= =?us-ascii?Q?eWtnRQs8fu6GBXnzHOuerORlLZSJcXq+v4z+8EnNGM4BiV+khPvtS/3BOHCR?= =?us-ascii?Q?Y3/aftvK0vsD8x1EQzYbfZ8KMRqvBPsoKpUzRr2WFEt/7DkB2TRa8R2FWj/K?= =?us-ascii?Q?eFpB7tFhnvPpkPP5tTWx/OiyLeaV5YMKrE1F/35njiBrCtuBOwRu0x5jwgU9?= =?us-ascii?Q?aXva8Yye5d1BtvysO1UVAaT8rWdrfcY1vTIYCOdfcfyLob3Fme6w5TKzWELB?= =?us-ascii?Q?gJ5iaPubbxr04MLrfvWLprD+SjdijvbiqetGKOXmbq3wgC+oVAyCoBdGP3kS?= =?us-ascii?Q?k0o9q4oXlu0OGQumxrmInsRZC13vvBmAQRfTGL1+2KEEQOBcWrSWMmbyW/0N?= =?us-ascii?Q?J8TdvtgcjTk5Ke42LcB8A8VEtw2eGuPdVN/aoSLkYAy/MO2zUW8TEatGba9T?= =?us-ascii?Q?tatMQVvys3OJVx1PWd87lri3tiss7UF2EL0lRdmDOJ+czoNwv+RfaKg3PNIv?= =?us-ascii?Q?O2CcNkmA93lkVweUr+GjyQmlAvjITZwq2tJnoZ2YkyBHV4SIE928qsR8m/zt?= =?us-ascii?Q?DdcRAFQ1PNzMINyOBE2y5vPznSHRwXeK1AaciwQJo83YCn6ho6d28WIzUSmy?= =?us-ascii?Q?2jzVcjj7b3wwjoYoUxlfRNNp/DDTxTf4RpJv/uTeroyjZktllg4FvMsodjOh?= =?us-ascii?Q?sJZE5QRat3AWW7P6qOVUJOKPkVFgiV6+hL2xK9Av3CRfGCTWAjkdPmPz4X4N?= =?us-ascii?Q?DcrgAgbts8IcACIKGbJlvHr3OxdK3x0rVxpHVCO1J9ZbvoW6bNMClVbQG1v8?= =?us-ascii?Q?Qnty2NziZWqHMTcquEk6DOeq/rM2piHN5OHuhu40l0CTLGikF+z/kOKFIiX+?= =?us-ascii?Q?ohvl+hzzOh97wSkPEYgquN5EJ0UzIKx72QqWlNiDmCfunlJ+cZGpRQFdq3HO?= =?us-ascii?Q?L7/2gLt1QJu+p4qbhTABf607ylJZNmf93xKSCTXywbaaFQRe5+/lblp1rzF7?= =?us-ascii?Q?pXhOz22Ly3yma17+fPWsb0fC6Dr5AsiPQb3bnZ1Zqb4E5V0KFnCpgNz3p9wN?= =?us-ascii?Q?+XPvsv78ee5XYIDSUj6JBlNwSKkYL3S6xnzp0IjDfyUIhxvrvcv7nSekdG+p?= =?us-ascii?Q?t71t8XEGuH2UTzTw2R2g8YMT6DMjagbQzJGo+mhY7VMucnSgJKZ5Np8KNsS6?= =?us-ascii?Q?8KbIMTNjLRNcujBu7dIbWFl6akL3iFJYKwUi6f1l/5Umdk1MPEoH7sNFAu5o?= =?us-ascii?Q?cqPX6QSAR+jrNraudXcXecVZ9J3Cwk6s?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB46804F23E0591C7B79C67363DBD89DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 49809133-b48d-4462-999f-08da3fd67f42 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 May 2022 11:46:11.6656 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR19MB3321 X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 55666 X-Mailman-Approved-At: Fri, 27 May 2022 10:42:30 -0400 Cc: "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_000_DM5PR19MB46804F23E0591C7B79C67363DBD89DM5PR19MB4680namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable A checksum file (a file containing all checksums) can be included in the ft= p folders (each folder can have one checksums file for the files it contains) This way the web page won't have to be updated with every release Otherwise if you absolutely can't, please add clear instructions on how t= o verify the downloads using the signatures, I personally tried my best and= still failed Thanks Ali Get Outlook for Android ________________________________ From: Lars Ingebrigtsen Sent: Friday, May 27, 2022 6:59:25 AM To: Ali Elshishini Cc: 55666@debbugs.gnu.org <55666@debbugs.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Ali Elshishini writes: > May you please include a list of SHA-256 hashes for the downloads in > https://www.gnu.org/software/emacs/download.html > > This will provide an easy and secure way to verify downloads > Please note that the experience to verify the signature on windows is ver= y poor > and it for me at least ended up with the file nor being verified because = of missing > public key > > A SHA-256 hash will be a simple solution That would require people to edit that web page every time they generate a package, which would be error prone and require too much work of the people who build the packages. The packages are signed, which I think should be more than sufficient, so I'm closing this bug report. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no --_000_DM5PR19MB46804F23E0591C7B79C67363DBD89DM5PR19MB4680namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
A checksum file (a file containing all checksums) can be = included in the ftp folders
(each folder can have one checksums file for the files it= contains)

This way the web page won't have to be updated with every= release 

Otherwise if you absolutely can't,  please add clear= instructions on  how to verify the downloads using the signatures, I = personally tried my best and still failed 

Thanks
Ali

From: Lars Ingebrigtsen <= ;larsi@gnus.org>
Sent: Friday, May 27, 2022 6:59:25 AM
To: Ali Elshishini <shishini@outlook.com>
Cc: 55666@debbugs.gnu.org <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
Ali Elshishini <shishini@outlook.com> writes= :

> May you please include a list of SHA-256 hashes for the downloads in <= br> > https://w= ww.gnu.org/software/emacs/download.html
>
> This will provide an easy and secure way to verify downloads
> Please note that the experience to verify the signature on windows is = very poor
> and it for me at least ended up with the file nor being verified becau= se of missing
> public key
>
> A SHA-256 hash will be a simple solution

That would require people to edit that web page every time they generate a package, which would be error prone and require too much work of the
people who build the packages.

The packages are signed, which I think should be more than sufficient,
so I'm closing this bug report.

--
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://la= rs.ingebrigtsen.no
--_000_DM5PR19MB46804F23E0591C7B79C67363DBD89DM5PR19MB4680namp_-- From debbugs-submit-bounces@debbugs.gnu.org Fri May 27 20:43:54 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 00:43:54 +0000 Received: from localhost ([127.0.0.1]:36070 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nukYb-0001Z9-Vs for submit@debbugs.gnu.org; Fri, 27 May 2022 20:43:54 -0400 Received: from mail-mw2nam10olkn2072.outbound.protection.outlook.com ([40.92.42.72]:5088 helo=NAM10-MW2-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nukYL-0001Yf-Kr for 55666@debbugs.gnu.org; Fri, 27 May 2022 20:43:53 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DcjemmQFued08JNhkdr+XmBcxaeJLnQ13l2ANmPjGJLQLmVON/iCYlZ/bCctwtumzvyur9JQhgAtFoAjeafYKx34NG5kzgS8JDdz1g4W3lKINLxmi7Klj4B8smB4/ct2vXjjBLtp8x5PIPIRHHjBJzaXrhJGh72+y8xGVpUIvYQIgf7iW2hRuod3DrTc41+fxeGKIoMljbk87g/8Sm3SoqhNPJQpCEunakSKdjtWR0HOx9PdmO89/hA2RNJjTJJjPZ9OXELuGBmfNKCa3bL+XvzJJE9MH6mFuM4gRwzfH6rB6buRKV6s/A6/kFZSFNSZiamwHj7Pjw0OG+el/HHsUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=DvdstaI85Vtv1pZ0vNbdaccVlqKZkUcXFEQiZ61qN+U=; b=XNblc7rnWNdkvRESVH0hKCwjGOJwEJSMhstxRUPwprE5HBvjZMNzSgZJH0wkTSO/udDxucIN5eknR4WZ/O4FLXSCDBgvBq5FWAWCr6SAJjEobOqsUIr6bUK8Li8mHS8WlCid2VnZp1S5Y4zH7OH7iK1klzddEl8lMcqL/RK0uW/i9fRXXnVt8lviGwpxF1WsPqHMxpb5MpzJC04Nk/yNjMV3CPhgBzj5pEqTqCH9dv3rdV6pzclmxllEwgm8ptrrskoN4+2MDTgXjg+PKlLL9n/eqDbevpSpr7fb6iKphzjZXf3KsKrQrULHgpe7tHTD2QW6Cn3s20vkuB8TA3Eo3w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=DvdstaI85Vtv1pZ0vNbdaccVlqKZkUcXFEQiZ61qN+U=; b=Nz9IHh85ZRlRyuSzAL2Ihx/enwjvcJM1FIDYNh7JSCnibTdr0c334HxgW9LRwRY7MBFoEGaJCL6veVdYAaE/F7RdBxfJJ7XXLqjcCxnRjsGZniVqO0i5lIsuuTfynE+Hwk1xcCSM64AjkogyCrR3vAMfJDDhQgypHw9hnXnS0IOz5dGctkAdQs+FRkEkl0HpMiEF1oWVxF6MIk5M4stPpztpXv3YA0z1Jgqmma3Udb4J+DUgWr7MyRi6TvUjPdTgF3LzegW5wxXqQYVBAa2euaORHzXV2PtJzeQ/3Qdzn33j2kKfe+nvPj1hb93Am5qNUpx+eVBVP48DnZ8BZh06RQ== Received: from BL0PR1901MB4676.namprd19.prod.outlook.com (2603:10b6:207:34::15) by BN6PR19MB1522.namprd19.prod.outlook.com (2603:10b6:404:f1::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.15; Sat, 28 May 2022 00:43:28 +0000 Received: from BL0PR1901MB4676.namprd19.prod.outlook.com ([fe80::bda3:1472:befe:d0bd]) by BL0PR1901MB4676.namprd19.prod.outlook.com ([fe80::bda3:1472:befe:d0bd%5]) with mapi id 15.20.5293.015; Sat, 28 May 2022 00:43:28 +0000 From: Ali Elshishini To: Eli Zaretskii , Lars Ingebrigtsen Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAY91+AAM0Q6A== Date: Sat, 28 May 2022 00:43:28 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> In-Reply-To: <835ylrnor3.fsf@gnu.org> Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: yes X-MS-TNEF-Correlator: suggested_attachment_session_id: b1f8c70e-9f5f-9571-fbed-ccdef6fae28a x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [Dudir19oHYcRzAXYcvQegs4rGPCarlvyD1hCpoSBwRo=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ee6fb344-5a9b-43e9-6a6d-08da404314df x-ms-traffictypediagnostic: BN6PR19MB1522:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: h9372UW9pN7UwRhhw9TbetC/s6T0M22rfJJ/1YUXiYUB4KV9B2EaLxwK+sVpmJpwiYFQOwD6jpvgvqfPdE2k/Hhm1/sA6b06bqjqOm6LBzLYlcaaTaX2zEGuw3DGvrK5+YjF+5xdAni38y/2ZkZVunv/VA/uDGRz39V3fJyMPBl4qUSSk+sIMnM7cCtkuM0TbizyTK0zBLlKqywzVTWSrbXG+RES3+Sq+ylBK/FAlUebS5K2doXyiU26eGz8yLDC4fRN9tlYhl38xRj7HPmCBXs1qLRgS1NTtEpSBQMsDl6z9hen5NhjHZVa1OSJfhbsgu/cRuDRxyxZ898SwhxFk0slqEO1c6uYcNOe9uYnlRBCnvwDBrQY+uDfXCwRBXucj2RG5GhvaJiDbrop1k5f0AqQ99m3AnzpQlUn23ui4DPh5pn8J1De0ISMq8EoZl7J0+nxLrnUvHcSzmmN24/uixX7dTu1efoVVpSIyCVeMp+DkmAxf4zqEgVCsP9SHA0Ycj3civK4CT9+T9WHz5ZZGEWZM17BIirRO4UYbTlqdbmkhHGbYBGliZptxczr6rycM5qjI0GTORpr8iKGqmAAxEx2YETYhKAoTD3dODUSa5Z6hs/hfs3Fhym/56K2PlGBW0sV9PYXPWkgovJy4LxZ63UyUWipv7V9c8NlzQBsr2g= x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?9VAO9M37vVkaZCmBDQl4v1w0HGo3VDo5efNiRUzJNpCvD1F1cPLkiCeNFC21?= =?us-ascii?Q?CpPm1mWyNOvY5zx+wcfKZ62VXMKHKBkkjsIafdydAup0HY3IdwpHYi5KIG+X?= =?us-ascii?Q?JfaQUR3yKRob694dOnzDnE53z5jpIrsRd0xgFeF0D61ybc5SH4R+cs0bBqQy?= =?us-ascii?Q?VjOXeLf0vQLN1tV76LVcwZXxCoW+Sw98jzXJUxScWNtprjMwweBEn2wVWAQ8?= =?us-ascii?Q?4B2bz6gvZbeevm59Y0/PQRTyFwIE8hcWZ6nCaQ56AHmwvgJgeOd538jhrIFt?= =?us-ascii?Q?wHU+Hh8yz8ApmeF9srMHjyuAcGYWPgRHPB7dfi9n68MGuMUwBDKIsE7m8/W/?= =?us-ascii?Q?x86SFDThHZtnJ3/3lPfA3m4mRfutrOxKyLwZPKjdALKcaSkPl6ApCyztLOYJ?= =?us-ascii?Q?bT/rDlfOEtJB5RfEnJP63C/tOCUvXb7oQ1WkzPTBzriw+YY3zO+dPuKdSnbR?= =?us-ascii?Q?u9x/j0Ja8GXK6cyJKvlIuh3AdDCZB9CXeKIzGdIyht/aDvzvcIesExUlfloP?= =?us-ascii?Q?mlUUQNdFE+EJS9r1AsiQIkeC/jW9xAb/6RUTHahwFEi6tpuh/xbEXz+gDAUm?= =?us-ascii?Q?p6xUnKuoO5N1hbXUjCzpyILQrzgPvq9R702vf9I2BUr6ZpXQ3l+2lAY6WggL?= =?us-ascii?Q?WxYxF0Kwa4F6m6lABgl+QhJRLV7NGSHtW+2lo32udxVqBYIEu3iiarNRjc3I?= =?us-ascii?Q?2WxgH+hgPsBNDwatgAPVy7rRTAZ3l+QzECXetrWkNqXq1GvPPYTZlg719DDO?= =?us-ascii?Q?f9lrLednWtgkCrPDJ6tBy0B9eO7p+9bu1bVIUrK+JIbpWwp7lUHsrVKXdYmo?= =?us-ascii?Q?kK/fsQX2unSWbhYxgblyh6s4qb8INjpO06kVPcF3BJsTZv6nazS/CriOx0dE?= =?us-ascii?Q?CJ8MdqCUvCcCTSkbG6DFx/+3nyUqMpsK/7p5CF+EaM59zw8EhMaQxRY98/Vz?= =?us-ascii?Q?WoY0O+zidf/8LV8/xZ6JuR8N2mQ6d4Zv16WMmwkwbLz17tWRoGMpRk3kkwre?= =?us-ascii?Q?57ZVAc3YNb1UsPfYb1cc6AkTUaxzMKFc149vJNn6bwuoIG19CxUF15Cb6AOZ?= =?us-ascii?Q?Wf7lsmFtNgXXdM7UCF7dKnB2v4GN5ceSUuwyT/7kaHz+1Mq98BFkJODPZ0Xr?= =?us-ascii?Q?jNTyJNFSUKyPChZ2pak7DBMAkLxXZ3JYMAOp62fJYBHiq0BLQbEKCAfBgJQ+?= =?us-ascii?Q?1xAn/YZachGvWEocpsz2ccs/Gx3IcZ0YHNhfkO+DkRVtORfYGctc2Q1ZslA5?= =?us-ascii?Q?CgtTWV7Y6PB7rVyzt/UAGH1WGx3AV0YykOtj2Y5U7e3j2M62uHC2LNUOemXm?= =?us-ascii?Q?YFHcPId8IS4ScDMsoYodYW5z3uwCBSC2JYtPEXgnbhGBhGu+t7hTvJ06/pFw?= =?us-ascii?Q?XVUmP/EtJ7piwmTKeXvuBD5d6O5KmI1jS6TYc5hYqPq7nQYMPyBVgIS0SR/X?= =?us-ascii?Q?GqrU6r/DlM4=3D?= Content-Type: multipart/related; boundary="_004_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_"; type="multipart/alternative" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR1901MB4676.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: ee6fb344-5a9b-43e9-6a6d-08da404314df X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2022 00:43:28.2894 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR19MB1522 X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 55666 Cc: "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_004_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_ Content-Type: multipart/alternative; boundary="_000_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_" --_000_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Eli Thanks for pointing out the announcement email Unfortunately it doesn't include the SHA hashes for the windows files Also verify the signature on windows I am not sure if this is the expected = output for me look like it failed >From command line PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keyserver keyserv= er.ubuntu.com --recv-keys 17E90D521672C04631B1183EE78DAE0F3115E06B gpg: key E78DAE0F3115E06B: "Eli Zaretskii " not changed gpg: Total number processed: 1 gpg: unchanged: 1 PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --verify .\emacs-28= .1.zip.sig gpg: assuming signed data in '.\emacs-28.1.zip' gpg: Signature made 2022-04-21 4:11:30 PM Eastern Daylight Time gpg: using RSA key ECE77CF417C76C1ACFCE7C2B5B6135511580F007 gpg: Can't check signature: No public key PS C:\downloads> >From UI [cid:ffde0eec-a938-43f4-acc5-c100d4e99514] I think adding the SHA hashes somewhere remains a valuable addition using and verifying signature on windows is more complicated than it needs = to be Regards Ali ________________________________ From: Eli Zaretskii Sent: May 27, 2022 8:28 AM To: Lars Ingebrigtsen Cc: shishini@outlook.com ; 55666@debbugs.gnu.org <556= 66@debbugs.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads > Cc: 55666@debbugs.gnu.org > From: Lars Ingebrigtsen > Date: Fri, 27 May 2022 12:59:25 +0200 > > Ali Elshishini writes: > > > May you please include a list of SHA-256 hashes for the downloads in > > https://www.gnu.org/software/emacs/download.html > > > > This will provide an easy and secure way to verify downloads > > Please note that the experience to verify the signature on windows is v= ery poor > > and it for me at least ended up with the file nor being verified becaus= e of missing > > public key > > > > A SHA-256 hash will be a simple solution > > That would require people to edit that web page every time they generate > a package, which would be error prone and require too much work of the > people who build the packages. > > The packages are signed, which I think should be more than sufficient, > so I'm closing this bug report. In addition, one can find the SHA values in the announcements made on info-gnu-emacs. Here's the one about Emacs 28.1: https://lists.gnu.org/archive/html/info-gnu-emacs/2022-04/msg00000.html You can similarly search for announcements of the older releases. --_000_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi Eli

Thanks for pointing out the announ= cement email
Unfortunately it doesn't include the SHA hashes for the windows files =

Also verify the signature on windows I am not sure if this is the expected = output
for me look like it failed 

>From command line

PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keys= erver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B1183EE78DAE0F3115= E06B
gpg: key E78DAE0F3115E06B: "Eli Zaretskii &l= t;eliz@gnu.org>" not changed
gpg: Total number processed: 1
gpg:             &n= bsp;unchanged: 1
PS C:\downloads> C:\"Program Files (x86)&= quot;\GnuPG\bin\gpg --verify .\emacs-28.1.zip.sig
gpg: assuming signed data in '.\emacs-28.1.zip'
gpg: Signature made 2022-04-21 4:11:30 PM Eastern= Daylight Time
gpg:             &n= bsp;  using RSA key ECE77CF417C76C1ACFCE7C2B5B6135511580F007
gpg: Can't check signature: No public key
PS C:\downloads>

>From UI



I think adding the SHA hashes somewhere remains a valuable addition
using and verifying signature on w= indows is more complicated than it needs to be

Regards
Ali 

From: Eli Zaretskii <eli= z@gnu.org>
Sent: May 27, 2022 8:28 AM
To: Lars Ingebrigtsen <larsi@gnus.org>
Cc: shishini@outlook.com <shishini@outlook.com>; 55666@debbugs= .gnu.org <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
> Cc: 55666@debbugs.gnu.org
> From: Lars Ingebrigtsen <larsi@gnus.org>
> Date: Fri, 27 May 2022 12:59:25 +0200
>
> Ali Elshishini <shishini@outlook.com> writes:
>
> > May you please include a list of SHA-256 hashes for the downloads= in
> > http= s://www.gnu.org/software/emacs/download.html
> >
> > This will provide an easy and secure way to verify downloads
> > Please note that the experience to verify the signature on window= s is very poor
> > and it for me at least ended up with the file nor being verified = because of missing
> > public key
> >
> > A SHA-256 hash will be a simple solution
>
> That would require people to edit that web page every time they genera= te
> a package, which would be error prone and require too much work of the=
> people who build the packages.
>
> The packages are signed, which I think should be more than sufficient,=
> so I'm closing this bug report.

In addition, one can find the SHA values in the announcements made on
info-gnu-emacs.  Here's the one about Emacs 28.1:

  https://lists.gnu.org/archive/html/info-gnu-emacs/2022-04/msg00000.html=

You can similarly search for announcements of the older releases.
--_000_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_-- --_004_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_ Content-Type: image/png; name="image.png" Content-Description: image.png Content-Disposition: inline; filename="image.png"; size=18749; creation-date="Sat, 28 May 2022 00:42:55 GMT"; modification-date="Sat, 28 May 2022 00:42:55 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAo8AAAIOCAYAAADZfOcGAAAgAElEQVR4nOzdf3xU52Hn+68QyDhJ a1K/Nk66iRmpGuRqnMRrc2ljx9cabRH64Vv9KDKte/cVKm74YV1sbAFXKNla7nUENSjG5spguIxJ t82razkS7LUkEIkkN3G8ccHbzTLjCMnSEKfdNCG2mjQJBoHuH+fM6MzonNEzQugHfN6vFy+kM+c8 z3OeMyN99TznR8bo6OiYJI2NjSn2v/Nrt/9TfQ0AAIC5KyMjI+XXbv87v17oFhCvJkgCAABg7vIK jGNjYwn/e1kopQ6MhEcAAADELIwFxOTAmOp7t/8BAAAw97iNJJpMUXuNQLqGxytXrsSXXblyJb48 VYgEAADA3GMSHhcsWJAQHGPfu0kIj7GwmBwek9fxCpIAAACY25JHGTMyMuJh0Rkana85LUwOiZcv X9bly5fj3yeHScIjAADA/OUWDmP/L1iwQJmZmRobG4t/f+XKlYRRyYQLZi5fvqzR0dH4/7HgSHgE AACYf5wZzev8xuTguHDhQi1cuDC+bcqRx9io486dO2dolwAAADCXPPHEE5KkhQsXJpwDGTMhPI6O jkqSnn322ZlvLQAAAGbN448/rkuXLiWMSmZkZMSnrhcsWDDxgpnLly/PdrsBAAAwS2LXvsT+OS+a GRsbs8Kjc4XYrXkAAABw44mdxhg7D3LBggUJ17kkjDwSHgEAAG5sbnfdkRQPkQvc7ucIAACAG1Py jHTyXXcWSHK9/Q4AAABuPJPdqnFap61//t57Ov2tb+lXAwNaIOk3/H59+oEHdMvHPjZ9ewQAAIBr xuuJgxkZGRPD41RHHn/x85+ro65O4b/+ay26cEEflnSTpJslvbtwoX6nqkr+Z5/VR3/7t6d7/wAA ADCNkkOjMzhOS3j88T/+o/7fggIt+p//qNzfvEk3f0jK/PUFLfhAGrsiZYyO6p9eflnnv/lN/bvu bn3innuu0a4CAADgak32eOoFzhXTDY8XP/hAf1VcrE995GYt/eQndPPCRfrQhz+imxbdpJuzMnRL hjUCKUkX33tP/62oSOd/+MPp3kcAAABj0WhU2dnZ8RtgB4NBjYyMzHazXGVkZOj06dOer58+fTr+ FJjp4vVI6vjjCq9m5PG//OVf6sP/+q96751hjY1Kvxr5pf753fP6+c8/0K8ujOkXY9KYpNguXXzv Pb371FOe5XVtyNB9zw0mL1TGhi6zBg0+p/sy7lO8iK4N1hvjvuc0mHLDeGXakHRH9fueG0wqt0sb nHVcE8l1DOq5+zLsfpiJ+gEAuH5Fo1F94Qtf0Pvvv6/29nb19fXpyJEjs90sV6dOndLn7vu8a4A8 ffq0Pnff53Xq1KlprdNrxHHCyGOMaXi8fPmy+l94Qf8SjUq//JV+9s6QLv/q17pZ0mIpXvBo0nY/ /Ku/0q9/8QvXMksq1uu7kYGEZV1HD2p9RYlRm5T7mF4fe12P5UpSlzaUHtT6zjGNvf6Ycs1KkHSv 9g6Md9Drj+UmlTvzujb49fJDAxp70bAfpr8FBFYAwHWjoKBAjY2NWrJkiSoqKnTXXXfN2ZHHe+65 R2+8/p0JATIWHN94/Tu6Z5pPCZxsYHFhuqONMdFwWJf/+Z+V/yd/og/fdps++MlP9EE0qsvnzulS ZqaUmanMm27STZ/4hC59//ta8LOfWQ0aHdXAG2/oM0VFEwv15+veg0fV9WKJrJjUpaMH16vixfR3 3HKv8v1T3XZuGHzuPpWqU2OzlVwBALiO7d27V//wD/+gl156abab4skZIN94/TuSdM2Co+R+C8eU I4+mfvaP/6ibJf3en/+5Sp59VhV/8zda8/rrejAS0Zpz57RmaEir335b/1tPj/7N6tUJ2/40GnUv NLdMD917UEdjs9RdR3VwfYUVJAef033x6eQNslaxRsQ2bLjPXhYbIevShoxSHdR3tcWfofue69Jz 92UoYfa7a0Oa09keI2+u7bKnme3lprPuE3RskP/lhzSQasTRtf7k5c422PvSNf6681SBrg2Oafv4 NPl4Xzqnzsf73W07AADmtiNHjujxxx/XSy+9pLvuumu2m5OSM0Bey+BoYsrh8ec//aluXrhQv3nb bQnLw2d+MGHdm265JeF773tJ5qrsoXt15qwVZsanrLu0wf+yHopNJ3dKT8cDz3d1Jv9rGht7UeMR q0QvjnVqvT0F/fpjJXrsy+t18Oh4qOk6elDrv+w2nW2HJKPg59Gurt3acmdnPKFPbbb5u9qyxauN k9SvLm3wb9Gdnfbygb06U+oMv9/Vlqelr9mvacsX4q+VvBj7y6JT6w8+recGE/tyfOo8sd8nbjeV fQYAYOY8/vjjevbZZ7V27drZbsq8MuXw+JFbbtHiK1f0wS9/GV/2/vsjejtydsK6lxzrSNK/veMO z3Jzyx6SXu7QoAZ19ow97Tx4Vmecoa70oOPcyHv1UJnBlG5JhdYfPBofsTx6Zq+2uYa6xHMeUwY/ r3b583XvwdKJF//Et/MYLUxuR2dy6DOsf/Cszmi94qeK5j6mL6//rsZPJ71Xe79mh9Lk12IXGWWU 6mCKXZ/Q78bbAQAwN4yMjMz5EccY5zmObudAzqQph8ff+vjHdfOVK/rFO+/El/1f2+t117/7bMJ6 V65c0U9Pnox/n5GZqU99+tPeBeeW6SG9rI6uDr2shzSeT9ar0zkHn/ZwXom27T2jp58b1OBzT+vM Q2VpXESTiku7ch/T62Nj+pq+4D56ab9ubeMcMU3if0yvd96pLX6vgOlRf1oGdfZM7MvndF+p7PIG tPde0yKmuB0AALOot7dXPp9vtpsxqeSLY7wuopkpUw6Pt3/mM/pQVpb+ubNTktTff1bHT5zU7+Yv S1jv/NCQRgfGr6D+7T/6I/3GrbemKDlXZQ9JW0q3SLGAl7tMd+qgY6p6aqxRzd3a/bLMRisnLTB1 u3Ife10De8en4aek5EUN7D2jUrfzM73qt5fHZ+kHn9PTBx0jkfquXu6wtxns0MvftV8biOi79+bL H19u2MapbgcAwCzq6+tT1Os6jDnC66rq2QyQUw6Pi2++WYHGRv3r66/r5z/7mX7jNz6i/7O2VuEz ZxPOafxBc7Myx8aUefPNuvXzn9ennn560rJzyx7SvQnToiV6cWCvtMV/dRdl5D6mL995UAfv/PI0 3XbHo13xKdwM+bfcqS9fZWW5j72uzju3yD8hQHr1i7X8TKm9zP+yHhpwjnDeqzsjX7Bf26I7O+3X SrZpr7bIn5GhjC9EdOe94/VUrHdeMJPcDV7bAQAwdz311FP62te+NtvNSGn58uWeF8fEAuTy5ctn tE0Z58+fHxsdHdWlS5d08eJFXbhwQYcOHdKzzz5rVMDFixc18v77+ljShTOS9Ktf/lL/dPSobg4E dFsgoIWLFk13+9PWtSFDRyumehHL9aBLGzKeVv7A7N23EgAAzE2PP/641qxZo8WLFysrK0tZWVla tGiRMjMz4/+mPPIYk5WVpcyFC/VP//RPE167fOWKPrjrLt12551zIjhq8Dk97XmhDAAAACazcDoK ufXWW/XBBx9oYGDAunnkggX69a9/rY985CPy+/1auHBaqrkKg3ruPr+2fPde7R14fZoulAEAALjx TFuqu+mmm+T3z9XHueTqsdfH9NhsN2NOKNGLYwy9AgCAqbnqaWsAAADcOAiPAAAAMEZ4BAAAgDHC IwAAAIwRHgEAAGCM8AgAAABjhEcAAAAY87zP47/8y7/MZDsAAAAwDzDyCAAAAGOERwAAABgjPAIA AMAY4REAAADGCI8AAAAwRngEAACAMcIjAAAAjBEeAQAAYIzwCAAAAGOERwAAABgjPAIAAMAY4REA AADGCI8AAAAwRngEAACAMcIjAAAAjBEeAQAAYIzwCAAAAGOERwAAABgjPAIAAMAY4REAAADGCI8A AAAwNvvhcWi/ior2ayj2/2y353pxrfqT4wQAwA1thsPjkPYXLdGSuRw+nOHoeg9K1/v+AQCAaTez 4XHohNq1VmvVrhPzIbHkbFJ39yblzHY7AAAA5ogZDY9DJ9qlykdVlv+m2k3T49B+FS1ZoiVLlmjJ ki06GVtWtEVbimLLl2jLSbf1i7R/SPERtv1bxssY2l8U3za+noa0f+MOvfnmDt29ZImKnn46cRTS tR2xchPbkVC+6+jeSW1ZkrSdwb5uOWmP3jq38eoL1z702Nf9Qx7rJW1/9w69aXbkAADAdWgGw+OQ TrRLlatytLJsrd5sP2EwXXpSW+7eofzWEY2MjOitnRFVx5LRmxHlHbCWj7Su1ZHqLTqpk9pyd7+2 jdjL36pU+0Y7uL25Q/1lIxoZ2auVknI2dVvrjIxopDVfO54/KSlHmw7s1IoVO/XWyIi6H77VoB2x cu127LbO39y4I1+tdvmt+f16J6kv9hdVS3Z5IyMj2rvSYF9b1+pI9UbpgKMuz75w9qFbnyTt66Z3 PNZLbNfIWzu1YupvAgAAMM/NXHgcOqF2VWpVjqSVZVr7psHU9dCgIit26tGV1rc5qyq14kiHFYxW 2GXJLk8RDb42qIiOqNo5SvamHdwc5VhlO0bTqo9IkUHvMJuyHY5yfyfPClY5ucrXEVXbo4cr91qB NbEvkttjsK+/k6cVzq9j27r1xbuOcr36JHkf3dZLahcAALixzVh4HDrRHp8iXbKkWkeUxtR1OuyR tPio4khScJOs4Hh3uyrfulajaSu1d2REIyNl6nBOQc8Wkz5JZz0AAHDDmrHweKL9Ta11TNOOtBpM XefkKv/NHXo+dh7hiXa9ubZsYqA52aEjKyq16oHE9VNyjNYNnWhPPI8veWTOtB0xQ/u1Zf+QrBD5 lnauiGjQuaM5q1SppHamW4eXWF98yr3cCWL76rVeTq7yHaPECX01tF9Fsx2MAQDAjFo4UxW1a6cO OJPQyjKtrd6tE+9Wpthqpfa+tVNFdy/REknSWrWOrJSGBqU3d+juJTvs9daqdcS6KjpxfVmjaQeS is3ZpG35S+Lbr1i7dnzkMWeTtq1douolR7Ri61ZJt6Zuh5ucXGnH3Yo1b8XOt9SdcMm2db6hs51r W0fSq8PJrS+G9nv0od0n3ZuU49zXnW+p22O9va0dWnL3Eu1I7isAAHDDyTh//vzY6OioLl26pIsX L+rChQs6dOiQGhsbZ7tt3ob2q2ijdIDb6NAXAABg2jQ2NmrNmjVavHixsrKylJWVpUWLFikzMzP+ b/afMAMAAIB5Y8amradVziZ1d892I+YI+gIAAMwgRh4BAABgjPAIAAAAY4RHAAAAGCM8AgAAwBjh EQAAAMYIjwAAADBGeAQAAIAxwiMAAACMER4BAABgjPAIAAAAY4RHAAAAGCM8AgAAwBjhEQAAAMYI jwAAADC2cDoKOXXq1HQUAwAAcF1Yvnz5bDfhmpmW8ChJpf+6abqKAgAAmLc6P7J/tptwTTFtDQAA AGOERwAAABgjPAIAAMAY4REAAADGCI8AAAAwRngEAAC45k5qS9F+DTm/X7JES5Ys0ZIlW3RyqsuH 9qsoYb1rj/AIAABwDQ3tL9KSJdU64lh2cku11DqikZERvbUzouotJ1Mu18kOHVnbqpGREbWuPaLd +60YevL5Hcpv3auVM7g/hEcAAIBrKGdTt0be2qkV8SUn1XFkrcrsxJezqlIrIoMa8lzuYWi/dkd2 6tGZTI6axpuEAwAAYApycpX/ZofeUa7Hciln5aPauftuLVkiSWvVOpKjk1t2KH/biHJmuLmMPAIA AMx5OdrUbU1nj4zs1cr4qKPXOZLXDuERAABgNg0NKrIiT79julxD2r+xXZUHNikn6VzIjhlIj4RH AACAGbVSZY6gN3SiXW/m5yrHc3mSk89rR/42bZrp+Wob5zwCAABcQ0P7i3T3jjclSXcv2aG1rSPa u7dVHUuWaIkk6xxG66qXlR7LHaVp/+6Idh7Ya327skxrq6u15IikFTv11t5rvz+ERwAAgGsoZ1O3 RjYlL12pvSMjmpj1vJbHS9Om7u401p9+TFsDAADAGOERAAAAxgiPAAAAMEZ4BAAAgLFpu2Cm8yP7 p6soAAAAzFHTEh6XL18+HcUAAABgjmPaGgAAAMYIjwAAADBGeAQAAIAxwiMAAACMER4BAABgbFqu tn5+/5HpKAYAAADT7NFNa6e1vGm7z+N0NwwAAABX51oM8DFtDQAAAGOERwAAABgjPAIAAMAY4REA AADGCI8AAAAwRngEAACAMcIjAAAAjBEeAQAAYGzabhJu4uLFi4pEIvrxj388k9UCAABcF5YuXapb brlFt912mzIzM2elDTMaHiORiLKysrR69eqZrBYAAOC6MDQ0pLfffls/+clPdNddd81KG2Z02vrH P/6xVqxYMZNVAgAAXDdycnJUVlY2q7O4nPMIAAAAY4RHAAAAGCM8AgAAwBjhEQAAAMYIjwAAADBG eAQAAIAxwiMAAACMER4BAABgbEafMAMAAOa3Y8eOzXYT5rzy8vLZbsI1RXgEAABpWb58+Ww3Yc46 derUbDfhmmPaGgAAAMYIjwAAADBGeAQAAIAxwiMAAACMER57G5SXH1BefkD1vWlsFw2pqjqk4Qll NSidYm5sfarPr9bh6FUW43YsknFsZsFVHt/YZ7Ohb9pa1Nswhc/6bEvRDzO+P9GQqvIDypvs8zZL hkPV8Z/nVaGpvfHm5Xtkjvrem3+vb36rx+jf9978+9luLtIwL8NjYlCI6nB1Gr+gEoJGn+prB7S9 M6z+zjqdfeEqfyAG12t7YEBDVxuGplPsh33yD9SE5Sb916f6dH5hGAW6brVX1GqdbwplmpTvxLFJ rPdqf/lPy/HtU71j/xP+zXo4ibXtRvuDY37tdywsWp+dPr24JyIF6nQ8Elaztl1ViMTV+9uXW6/J uph98zI8lqlLPbGfB9EedahEhaYBxFejttYaZUtSdEhn5VeOL2n5lPm07hG/Onrm0A+r4UEtawmr PxJWf6RFy/Zs0+FoVIe3dams017e4tcz27x/WVs/oGvVnk69Bv05PCxtX18wrWWm2JhjEzMd7/Vp Ob4F2hWx9vP41nxJUmBrh7XfV/1ZxI0gu6ZV/ZGw2mp89s9zSf4cZSe/hlmRtShLf/DvC3XLLb+p 7m9+S//2t39bf/DvC5Xt8yX8+73fW6GsRVnuhURDqlq6VEuXLtXSpTtm5o+aaEhVVSHNod8Wc868 DI+FJRoPAcODUkmhHQZdRmzsEZLDDfZf0/ERkz7VlzYrrGPamB9Q3h9uVJlzVMtt5Me5vLRZYbfG BZvsH2RebWlQfXVsWiSqw9WJUyTOaZfEUafEUZr63qR1vUZqgk3aFYx945M/4LJOdq7cFsdfrmlV f2ddinXG9yPevr+1+zlpn537ml3TlDgqlTyyGB/9iOpwtfPYRXV4W7PC4WYV5wdU9cr7kqSehol1 JPcFx8bs2CSbsD8TjtXEUcP48Y2GVHU109cDLePlO/vSccpJqn7udbwvNh51dk1Sux2jVL0NsUBu /3yI/ezwWN+lUte2Jb6HHNsnTU2nmjr13B+3+qurXfvOqx2u++1Wvv3ZS/+YTPxcTZgK9yrDuV7s NJR4vz1v/zyXdLTW+nz+56Tp/hRtM+pTTNk3v9Wr1VWV+rvvfEeS1P3NbyX8+/H//LH3xr4atb32 pO6550m9dm6ngt5rYgbNy/CYne1XeND+YXfymJZl+yT1qb50UJvtkYz+zhJ1xEZsws0aWBlWf6TJ 8cYr0K7OOgXsKY7+51foJilFOVbYjI8UpfyFnaotA/LvDqu/pVzttduk2NcvxH7httojUfao08E+ WT9wa6X4KFVYu7JDqtvj1wH7+wP+wcn/SoqP0vq0rrVWA6WxINylst1XM9Lj07rWWJvLpUCdNvy+ 4+XYPkdi++3xC8mXo2Vhaz+Ge7q0rEI60StJUQ0oV+M506d1u8ePXdvqjzqOcWJ/TsSxSfvYRFPt Tzqfi6kqUXMkrAMVksLNerHXalNV7bHxkcqWcincrLrkMNfbYIWBihar7RWO13w1aosdz0iHtgek 8J5tOhyVgk0tqpQkldv73aRgivWT68yrPRafPu2PdGi731pevCeS0JbwnrL0zq1LtT+mfZeiHa77 7VasvW/Ht+aP97vRMfFp3SPWkzfaT1qhbrinS2FJgZJCZRuV0aW62uQnnHzG+nkeb1ur1n3M8XKq ctPuU6Tjrf/2Dzp9+i0dOhxSb99rGhx8R++8M/7vllt+U35/rnmB0ZCqqnZoR5U1GrmjN6pQ/OuJ r8eXx7ZNHsW0RxlDO2LLogo98ZROn35KDyxdymkPHubnE2aCRaqs7VZvk09DA+Va1SR7yuKY2vOd P1TKFVWu9QvT9M8Vr3Ki0tlAnZpNyknZltgUe64Cgdzxr+PbhlTlHNUM5Go4OqQOJdXty9EyNWtj vnQg0qRgU5Mka0SheE/E2nRrh2PKpk/1pV0q62xVtqwRBrWE1R+M6nB1mZ452Kd1TWlMIbvud0hV tQPa3tmkbIXGlwccpxUEi1SpFg1FpeCE2aQCraqwXtOgX6vW52rfwT4pe0hn/TnK1pB33c5jnGq0 jmOT/rFx259oSPskqz8n+1z4atQWqZl62+1pSOeP8Fjg0J4y5e0ZX279UTne+N6T1nGuXOnef85j YsJk/Xidj8RCv0/rmmrU2xBIaEtwZbl09JjaT/Zp10qz+ifbnwlc+i65jIR2pDmsk53tlxRReDCq YZkdE+t9dkztA0Malk89XRFJ5dpc49NwKEUZhbFv/NocabVCbW+DUTtTvV96B9PsU6Tlvffe03vv v6/33rdmiP7l5z/Xn/zxGknSokWL9JlP36mf/+IX+sudT5sXerpf/tfO6dzwDi1d+4SejH29L6QN X3W87pPUu0NL1+5Q0bkidT/wlPKOnFNbUIqGqvTAjl6d2yDp9FMa2HxO53ZaxQe/+qRefUL6aluN OOnB3fwMj7GQ0dujDn+R2mKLA3U6nnyuVOyXXDqmo5yplBENqarUOt+tLTbdt81rZet8sV32lOlG lVu/2Gta1T/h93Sf6vNb5O9sjU8j7huoU3OTZI1MdUjV23Q4WmB+8crExuvwNmsEyqpjaqX4cqUT w30aGMjVBl+hygYOqndYWrayRkoVHtPBsUmTy/502iMFw4MKK41Rg2mWGMLTEwuCsTJ6G1JPWaa7 /o1q8mNSoFUVUvvRLvVEczQQllRRpKAUny1wLSNqf/4DuVP+he5WrmH+xBQt8/u1cf0X499/6pOf VN9rfydJumnxTbr1t35Le57dq6/8RaM+9KEPmRV6z4P2H71+3XOPf/zrCa9LChbpYe3T8Hf86r/n SX3V/gPJV/ig7nmqW70b/NI9T5oPMEHSPJ22lqTgSr+eqW3Wsthfi74cLYtNy1wNr3J8OVoWHr9Q J/6XbDplmHCMBMXr8BWqTEnlRUOqD0Vl/WLv8L6SOBpSlTOcuLUv2qOOsH3hUMK5hikkrTcc2qZn /C2Tj1z0dqs94H2BU3ZhifRCi86WFCpbPhWWSCdOSn63eduwwXRwMo6NN+excZbhtj8/srcJFqnS 8bnwbs803JLJwRrxksJ7DqbsD1+udSHO2eGJlUcHnSOIUQ0NpK7TdP3gSntaNn7qRFSHG0LyrUyc rnUdRRwYSnmVear9MRU0aYch57amx0SSguvrFFBEHdta1K78+IVV6ZSRjlTlpurTxKu5MRW33/4p PVT9R/F/H/vYv4l/vfzuu/V/f2WnNq7/P3Thgw/03vvva3R0dLabDAPzdORR9tSHtCr+C9E6h7Gq NKC82KJAnY7vTrdgj3Jaa7SrpVt5pQE9IylQUZ7i3K4ptsVXo83+gIrzm61N4nVY5/g5y6tsaUmY ggls7bBGxJJYISeisN3u+LoJ7cvX9s5WzxORnVN1xfnNqmwJa1dCmLNvkaFa5R2V5ByZkuyT65vt b8p1IJLiHD5fjhSWynZbO5OdLbV35ep48oiZr0abKwLamH9MgZoaSR/1KjEJxybtY+PLmbg/n+xR hySpIOFzYa1Q59HaaRRsUn9nrqpKm7XRcQpC8shSds1ube8q0zNJ05VWES2qPFqr9j1lytuTr0DC B7pAG7bmq33PMbv8ch2IpFo/qW0tUl6to28DdSpsatLxrQMq3hM7FlZ7rVC/XtsDx/RMwvGYKNX+ GAumaofbfruc9+hsZ0XsDxOzYyLJ+qMr0KxnwtatdcZHiVKUUaipS/l+mYY+hauLly7qm9/qcX1t md+vnt4+/eSnP9E3vjF+v4iH/+SP5fMtnb5G9Hbr6/c8qNc+n62BP12rF3trtDMoRXte1emHNyuo YfdZp9MDGpaYtvaQcf78+bHR0VFdunRJFy9e1IULF3To0CE1NjYaF/L8/iN6dNPaSdc7fvy4Vq9e fTXtxXxjT+82c+uVuedaHJveBuWdLFL/1Z6jCWDOOnbsmJYvXz7pet978+/1i1/8wvW1ZX6/br/9 U9rX8oI+8YlPaHVVpXsh0ZCqHnhKpyVJD+vIa37ti52PGA2pKvnrr0pPxNe3t4ldpZ1c1rmdCjrL cFTbu2Op1n5duufJ19I+NebUqVMqLy9Pa5upeOWVV1RcXDzpeqYZLaaxsVFr1qzR4sWLlZWVpays LC1atEiZmZnxf/N35BHAnJB47l+5DkQIjgCk31vxv0y6zubaR3Tka/9Jv/rVr9zPefTVqO1c4sni wTbHa8lfR0PSPU/qNbeLXVzKSijDWcfO8QtoMBHhEdeWr0ZtPDhgbpqmYxNsCqu/6erLAXBjWvuF /zDbTUCaCI8AAOD64DGSiOk1b6+2BgAAwMwjPAIAAMAY09YAACAtp06dmu0mYBYRHgEAgLGZuA0N 5jamrQEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHu8wgAAIwdO3Zs tpsw513v98IkPAIAgLQsX758tpswZ90IT+plzbwAACAASURBVN9h2hoAAADGCI8AAAAwRngEAACA McLjjS4aUlV1SMOz3Q43c7ltAIBJXb58WX/7cqs2PrJZZX9YqY2PbNbfvtyqy5cvz3bTcBXmZ3iM hlSVH1Ce/a8qFL02QWO+hZc51d6oDlcHlDeV9ky2H27HP0Gf6k3r9SyrT/Xx5Q3qnWz9SduUqLfB pG+89mOy/XO2PaC8hr7U++Sxb/F1Ysvj5aSzDwBuVJcvX1bd9nr9jzNhbXlss175z1/Xlsc263+c Catuez0Bch6bl+GxvrRLZZ1h9UfC6o+0aNlgVPLVqK21Rtmz3ThYoj3qULkq1aWe1DlqosmO5fCg lrU4jv+ebTps1zEcqlZefq3aTevyKKu3oVaylx/fOqCNseDkVXeKNiXrbQhon8oVSNUsj/0w2r/e 7njb+yMd2j7QknqfnAJ1Oh6xt22RNsbCYaBclXY5kqRoSPsG8lPuA4AbW+s32vThD39YX/mLRt2R t0w333yz7shbpq/8RaM+/KEP6ZVvGP+knhnRkKqqQkr3V9aNaF6GR8mvHF/s6wLtaipIHK1KHkGp DmnYfv1ww/jyenvoxfqFHFtebf+CjOrwtmaFw80qzg+oak9z4mhYrL6EcpNGahLKS5Y4OlT/t+bl GLU3Nhrr1g7n8tJmhd2al7Ctoz0efZhsuKdLKlmvVf6IOnoco3PVDaqvTto+uQ8nG3kMNmlXMPaN T35HgsmuaVV/Z515qHEtq08njpZrlb08u7BEgYEhqz1edadok9NwqFr7cjvUtj53fGE0pKqk94nX frguT94+oS1RDYT9yvGl2CcvwSJVhgftH6S5WlWi+LHsPdisZSUlqbYGcIPr6/s7/Yc/fdj1tf/9 Tx9W32t/Z1ZQNKSqpUu11P432cwOrr15GR5XVRzTRpdpNEuf6kubx0eBnL9ow80aWBkbVSlX+wtW QMmuabVHacLqb/HrmYN9knxat7tOAXskpm31R70bFC+3SUH1qb50UJtj5XWWqGNbchCK6nB1rWN0 KKxdv29ejlF7a6Ie26foH48+TBil8ujDRFH1dEllhT4FV5Yr3NUzvk54QP7dju1r7WCasO9piPao QyUq9E2+6pTL8uVoWTxEGazvsXw4VK067VZbzXQ0djL2aQP53Vrl1qde++QwHGpReyBXsdb6amq1 bM9B9UZD2jdQpw2F16blAK4P7/7oR1p6+6dcX/MtvV0/fPddg1J6teOBV/Xga+d07tw5nTt3RHkD nCwz2+blTcKDTWH1N0nqbVBefq1U0aL+9faL0SGdDdSp2S2BBOq0IbY8O3c8NEVDqnKOwAVyNawC 8ylwZ7nRIZ3VMbXnO+/AX66oNF5etEcdcmmjaTkm7fXaPirv/nFu61gnu7BEgT3d6l2f692HCdtb 4anZJ8lXpMraFvVEa7ROkgKOUBUsUqVaNPSjpHKN9dmnMLROw+kKzrLc/igxrdtreVQ9XRGFw2XK 2zO+tLhaOt5ao7ZIzdSb7nPb3qd1rWGtU5/q86s11FlrVla4WcX5zdbXgTodb61RdjRkv1igVRW1 2lgqVbaEla2QZzEA8KlPflLnfviu7shbNuG16Lkf6hMf/7hhSXnKjv/NHdTOnbFCQqp64CmdliTd oydfa1ONT4qGqvTAU6ftlezlCqnqCenBvKf01Ncf1pFzOxVUr3YsXauv22s+/JdPSpJ6dizVU/bC h4+c0860fzdd/+blyGNcsEn9kRZVHu0eP/l/eNB9GtZLNKQq5zmU6Ux5enGeNxaZwmhaqnLSae90 tSNNwz1d8elz6/w8x9T1tOlTfX6L/J2tWnfVA3mTlBUd0lnHCJz3+qnKscJc/Fh02qPE1/w83QKt qohowh/qE/bJ5nzPuLQtuL5OAY1PfwOAl4KC/1X/6W++7vraX//N11W08g8MSgmq6OGva+3SpVq6 w3meVK92PDCgzefsEcnXHtSrT1jnK/pq2uxRynM6dyRPT71ob3f6KQ0UndO5czsVVFShqrXSkXPx dXf+vnOdczp35GF9fR/nQLqZl+GxyjldnfxLMFikynCaF2k4RsOGe7oSw6dzas/x9YT1Ynw5WhZu 1ose5wJa6xSqTJOtk6Ick/Z6be/L0TJH/7juR9K2wz1dClcUGQZPa4St0jEl39+SNHUd09ut9kCJ Cj9pVLCjipCq0gqO1hSu63kyrmUVaFXFMZ1w7r8/xwpSXnWn3abkbb3OjU1/++FQg6OsPp04mi9/ dop9SoevRm0z9EcIgPmt+o+q9Mtf/lJf+o9P6u0f9OvXv/613v5Bv770H5/UG//1e8rJMfsJFNxp h7mibuu8xx29UnRY/bJD5dKlWvrAUzp9emD8uofY8rVfl/qHrd+L9zzpmN3r0at6cuKMl3OdbL/u mY6OuA7Ny2nrsoFa5eXHvsvX9s5WxxRagXa1dCuvNKBnYqsE6rwL89Vosz8Qn6oLVDiugvXVaHNF QBvzjymwtUPNW7tUnB+YuF6CAu3qrFNVaUB5jvoTR5is8xOd61T+eXIbvcsxbW+bx/bO/nHfj+S6 y3UgUiBFh7z7McZtSj5oT13/qCRxWlTlOhBxTouasQJvRGHHMQ5s7VBbjU/DoWoV74lIkorzm1XZ EtauYFQD4XyV7Z6Y6jzLamrRifyk/U+xfrO82zQV7vvhsTzp5292tvSMox2VLWEr0HrsEwBcC5mZ mWp+Zpdav9Gm5/e16IfvvqtPfPzjKlr5B6qsKFfTrr/Uk1/+kj772c+YFRjcqXPnirRjabd6N/il e57Ua201iTMo0ZCq7HMk23z2909cg527wWWcP39+bHR0VJcuXdLFixd14cIFHTp0SI2NjcaFPL// iB7dtHbS9Y4fP67Vq1dfTXvT19ugvJNF6m/iF+Wsi4ZUtU1qnulbKvEeAIBpc+zYMS1fvvyqy/nv //37eurpr6QOkNGQql7MVlvsxEM7DH61LVsvLrWmnRPOSYy/boXKaKhKD7z6oF77qvSEY7kUVajq AQ1sdmyftO2E7w2dOnVK5eXlafXFVLzyyisqLi6edD3TjBbT2NioNWvWaPHixcrKylJWVpYWLVqk zMzM+L95OfI4md6GgDYejX3HCMuNbnh4QJUrm2a7GQAAh89+9jN68stfSh0gfYV6sP8BLV0aW2Bd AOOTtPO1J1X1wFKNv2SNRG7OW6oHlj5lLXr4YY+pZ59qvpq4feyCGUzuugyP8auxMbf4atTWOvPV Zte0atfMVwsAmEQsQB79L/+fx+ijTzVt5+R6PwpfjdrOTXzFt/Oczu2cuHpbm8H2f5z0evI2kHSd hkcAADA/fPaznzE/7xFzwry82vqqzKnnP3swebaz2+tzZd96GyZ9Ag0AAJif5mV4nPCYwITbnPSp PvkRd3MlVE1mvrRTmvg4yHi7+1RfO6Dtnda9DM+6PoEmjbIBAMCcMi+nrWOPVcuW/QzlgKybIPsU v+/jhlk6v+6qxNqc5q1rZp2zr6NDOiu/VvkkaR4eAwAAkNK8DI+rKgY0FJWCPik66NfmR6R9w/aC 4UGpZL31CL9tUnNroXq2NSsctu6LF6ipkfRR9TQE9Ix9RXbsHnpxybeUiX2/W6rbJpX5myds67z/ Xuzek+sUUlXpoDbHb6rcp3r7WcM+r/XtemLcy5WkQb1YHVB7OHm5Yx/ijzC0X59wr4E+1efXql2O fcl22c5ul7Xf5ToQWa+h5D793kfV3JqjF+1tN+Yfk3LvV+5NK/T/tNYo26WuDcMu++aL6rCz7K0d aivscd+X+NN2puMpMwAAU6dOnZrtJmAWzcvw6MuV9vVEta5GGlKuCoM5WvZCj4ZrahQ9eUzLEm7L Yt2QuyMWBqMhVYWaNfCI4/nYL4S0IWh478Gwx7Y1reqPXbTV26C8g31a12TdtPtEb5OCQVlPVKko sq78dVt//cTqXMtdLyk8IH9nWP0+O2BuC6kwHjr7VF86qM2RsBVaoyFVbQupMOH+ilEdrq6VWsLq Dzq2y3fZbnfSfksKJvfp96TYzcXPOpdv86pLUtCtzwoSj5dXm2b6XpEAAEmakXsYYm6bl+Exu7BE OhiVokPqUI7WySe/uhVVVEMD5VrVJKV8GGWgzvH4odz0nmXttW3CSJ+kQK6GVaDgynJtPNmnXcEC 9Z4c0Pb1TSnWd+G1nuMRhdmFJQrsGVRUufY2QzqrY2rPP+YoqDw+1W+t4/IkGM/tchP3O11udXnu W0FiKEy1L74atUVcb+AAAACukXkZHuXL0bKj3epdKS1baYWHwhKpJxrVgHJVONPtiU+fhscfh7TN fi24XttfOKheSScGSrTBN8n6puVOZsIjEa9iu2hI+9ItZzLp7NtU9wUAAEy7eXm1tVSgVRUD2vfC gPx2osjOljq2tehsSaF7yLAvsjHmWN96nvEkHCOBiev7VFgyoBMN3Ylt81zftNxxwz1dClcUKT6w 58vRsnCzXkx1mxxfocqUtI7Jdk6mfepWl5R632Jlp2rThCvtAQDAtTY/Rx5lnfcYHihRc+xCiexc KXxMyx5xuXLCZ517uDH/WPyCmdSF16h5a7WK861J6UBFeeqpbV+NNvsDKs5vdl0/u7BEZ/cManPE Z7S+Ubnh5vhya2SuQIoO2S9a5x5WlQaUF1t/wuiddS6oc53KlrD7do4LeBLaZtyn7nV57puz7K0d apt0XwAAwEzJOH/+/Njo6KguXbqkixcv6sKFCzp06JAaGxuNCzF96Pbx48e1evXqq2kvAADADe+V V15RcXHxpOuZZrSYxsZGrVmzRosXL1ZWVpaysrK0aNEiZWZmxv/N02lrAAAAzAbCIwAAAIwRHgEA AGCM8AgAAABj8zI8VuUHlJcfUF5+g3qjIcf31r9601vNqE/1zrJSrepST57zNjG9DYmvNfSl3GY4 VJ203NrGa3l6dUzcl96GgPKqQ0k3Iu9TvWNZ2nWnsU1VyHE/HY+yvNplHwAdrnbbhyn2yzQdr5T7 k1ReVSjqWsf4+9X5frTr/s4k72+vPnbtx6Ty4/3uUm801fJUx8mg3lg5CX3hLNvlc5nyeHp9jt2X pzyWAIBJzctb9bR11o0/ezoa0j7nrVuiIVWVBlSf/LxqF70N44/MGw5Vq7ihT/1NBd4beNwixnr+ tF8HYo/Qk9Tb0KBe+8ksrreVcT52UFa425frS3wcoWP5lOpwlqHE2wHFn5kdqNMGe1n6dRco6LGN ehuUV6uEbVL3VYGCHu2SZD+lplyV6lJPtCb+LOup9Mt0Hq+U+zM8qGUtYbUFJSvIbNPhZSWJddiP WxyOPx6zXAfiz0K3Xu/wWt+jj8f3Makfe7sdj4iM6nD1Nh2OFth9mVRvnPtyr+PkefwmlBPV4WrH TeJ7G5RnP3Yy6va5XC/PY+P1OfZa7vU+BwCYmZcjjyn5atTWWaezL9gjH543ku7TiaPlWmX/Nssu LFFgYEjD9mhFfBQntv2PvCqMqqdL2t6Z+As22OT2i9iriJD2HS3X5hqfx3JNuY7hULX25XaobX1u wvLsmlb1d9Z5379yKnU79qP35MCEbUz6yqtdwz1dUsl6rfJH1NETNS7PZcem8XhN0jfBJscfMD75 3Tp7eFBhf475PSsd67v3scW1HxPaE9VA2K+cKWYmr+M06fvKs8DYoz69PpdevD/HRuV4ffYAAJ6u v/Ao2U8lSfOJMvFtrBtsa89B9Sqqw9u6VNbZqnWflH1jbsdUV3VIw9EedaT6Jey2TdIqvQebpa3r J4SA+PJ067Cn6IZD1arTbrVN4Rejcd2u+9GnE0cjeqY0aao1jbISWYGvrNCn4Mpyhbt67D8MptAv 03m80tmfaI86VKLC5PdR7YC2r3eOdh/TxuRpaNf1Pfp48oZY0//53VqVMBLoUm/K5elKLsenda21 Goi1v7RLZbtdRnydn2WP97nn+gbLvT57AABv83LaOi2+GrVFaiZfL2kb6wkzZdYTTnySovJ87rMC ufLMD5M9DSU28hHxGHWM+Oy6060jqsNdEYXDZcrbM760uFqTP50lnbpd9yOqhGnKaEhVpQ3q7cw1 K2tC2VbwavZJ8hWpsrbFmrrWJG3zek73dB0v075Rn+pLrT9CshVynbYubK1Rtgq0KxLWrtg2Kaa5 C1tz5NrHrlPPTj6taw1rnfpUn1+toc5WrfO51FuYavmkO5zEvZycg7Fp5agOV5fpmYN9WteUohjX Y9OnE+k2J8brswdgeg1m6P4/k1769phyJ1975s319s1B1+fIY3RIZ9MNKUnbZGf7zbbz5WhZuEs9 UxyUmXTUccp1WCGhP2L/66xTwPCxflOpO+UIjq9QZYEBDWlqfTXc06VwfNSpVu2yp66n0i/TebyM yupTfX6L/J0eoctzlNxjmttzZM3uY+P9KtCqiogGJszjetTruTxddjk/CmnfQJ02WB2pda0d2j7Q MvH0knQ/y17ruyxn1BG4BgYzdP/CTC20/93//MxV/fz9mVp4f4YGp1rAYIbuj23v/NprnRvYdRge +1Rf2qxljzhGalzPeSzQqopjOmHPew33dDnOPetTfa10INKiZXu2uWybWM6GrdIzpYlTaNZFE5OY 9FzH2PKrqCNdU6nbZZtVFce0L37eaGx6dyr7EVVPV0SVLY4g3BKbup5KedN5vCYpKxpSVargKEm9 3WqPhZrehvGp51iffdJrfa8+9m7+cKgh4YrmE0fz5c/2qNeXYnm63Mr5fI6WhZv14oTyU30u3Xit P0k5nOsIXBOb7shQ9Q8ua3T0skZHr+jOtzNmpuLBDLVqTF9Uhjqnmuxyx/RtRh+NzMtp66rSZoUl FecP6kBnrn0uVLP9ar62d4aNptaCTS06kR9QniRrCtA6l6w+35pOC0oKtnQrr7RBORPqidXVqnU1 rTquahXnO4ZmKlrUryHt89rGF9Xhbc3S1o4JF5W4Lc9OVcfkuzpB/KpYScX5zapsCWtXMN26vdsb bOrQUHVsytza56AkpSzLpV1/XqezqlNzQuGOqesp9EvKvkzzeKXqm+GeLoUVUbg0oGfslwI1NVI4 5KijXAci9h862bk6Wxp7P0qVLWEFFUpq0/j62V597NaPLWHtypaecbSlsiX2OXGr16s9KcoPetXr Xk6ws05V8eWO9rt9LqNDEw+kzf1z7L3c6z0LYHosi6evMe3fL2nQCpCdmzL1xCHrlS++eln7i63X 7r9jgd6w13919IqKndPIgxm6/44MfWn0ioolPX//Ai37tvW102BnhlR9ReVvZ+orndKjj2ridPSE cmP1SvrclYTXO/9sgd54Q7pjofS5r17Wtx+dZKfd9mPCcqueH1wHATXj/PnzY6Ojo7p06ZIuXryo Cxcu6NChQ2psbDQuxPSh28ePH9fq1auvpr0AAGCOOr4pUw8ekvTFKxrdP2YttAPUnbHAeHyBFn5l TD/4ttS8cIFkLx98foHueHtMo/ulTQszVD56RbnPL1Dz25LKr2h/cYY23S/VuYSv5+9fIL10RY8O xsq2A6JreEysN778JenPnOHS7TxI1+UZ2uS5Hy71TFN4fOWVV1RcnByjJzLNaDGNjY1as2aNFi9e rKysLGVlZWnRokXKzMyM/7sOp60BAMBsKN5vT1mXZ1jnPW6yp60/d0V1sZyTO6bPSdKgdMaxPLd0 TJ87lKHjGlP5F6Wzg9Lg21J53ZjOHMuw1r9TE4OXPWVdmiupeExffGOSqeukeq+a135Mdz1zCOER AABMr+IrGh29oi8eytDxKWye+7vS24MZOnZmTLm5Y6o+k6Hjgxm6s3xswrqDnRl6440FumNhphYu XKBDylBr59XvwlUbzBifrr7OEB4BAMC0uH+T4wKZQenM51JM0eZKd76xQM12uhzszNAbXxxTsazR O30lQ2eqre1Lq6Vjx6TfdSmsszVDX3w1dpHOZY2+OqY3Wu0rot8YvzJ6sNMOc7nSnY7RyfjyZG8Y XlXttR8mo6DzFOFxPouGVOX6bOFp3mYmOJ7RbP5s8jlsrvYz3M2V919yO3gfYZ6pPrMgfpuehXdk qPqlVOf3jWn/D67ozIPW+nc8Ib0aO08yV9IbUnWp/e0y6dAZe2raaTBDrUqaGo6FNo3ppa9KD9rt +bO3ZU2Xa0z7X5WeuCN5uUPumL70xQw96Ha7ofgopzXSedxzPxLrWei8cGaem5fhMeGpH5634kHc XPkF5GxHQpv6VF87oO2d1v0o44+WnGrZmH0zeTy86vJ8vyVzvP8iYccjHGfaNHwOgFn26LcdI4Cj V/RoribeAsf5fe6Yvu1YfzwDjml/bHvJmgZ3u9DE9fY649vmPnol3p5v778yvm6xy/KksmLnbyZc aZ3QXkebvfbDUc/oq2OS2zmb89C8vFXPAX+zXuyt0a5g7Ea/HVN46gVmla9Gba3219EhnZVfq3yS 5FiO+cs3B46jaRsS3n+zyO1zEA3NcqOA9CxcmDnbTZjjMrTwkDQ6enm2G3JV5uXIY3C9/Vd58o1+ oyFVJT/3NnnEwXMEok/1+YnPCR4OVTueo2uPbtrbH25I/UzhhG2dox/J5SWv61pP7CbUSW38r9b2 PSnbYt3TLvaElqpX3vfexqN9k/WT63YT2p/Ujj3N9nGwbuoejj37+A83qsw5ImlyTJLLDkXN9iXF +yWt4zvZyHdvQ2K/uLW/2lmP9ejAw9E03kfJ/R0NqSrh2c99qnfuo9H7LZ2+Stom9jmLhlRV3aD6 6lhfxp6t7ZyWHX/d+/3oVafLsU9uQ6p1PN5/Cfvk2Y4U+5X2+yXV58CtP5htwdw0mjAqxz+vf/Pd vAyP8tVos79Zddu6tKwl9ixf+8ky9pNIjm8d0MaGPsMCozpcbT9nNzI+dZVd0+p4qolfzxy0yws3 a2Dl+NNO2pOnl6Ih1e3x64C97QH/oKLqU33poDbHHxdYoo5t1naT19OkoFsbf9+gLfJp3W770YSR sNpWf9RjG+/2pe6nFNsltN+lHZKkAu3qHF/e//wK3ZT2MUkquyZqsC8p3i+T9mmKYzbhrRVSVa10 INKqdT6vvvJp3SPlaj9pl9HbrfaKWq1Teu+jhP721Wiz4wkrVplFCppun3ZfpXimdnhA/t12X9Zu k3Yn9Wvs9Vh/1zao17jO5GPv+gzIFOu4vP8Syk/Vjkn2K633i9fnwHkMJntPA8DMmJfT1pI1+rhv m+xn48p+du34k0iyC0sU2NOt3vUGZxdEe9SR/BQTyfrFbz/NRpIUyLV+WAfqxuvNztWER/76crRM zdqYLx2INCnY1GQ9Dk3H1J5/zLFiuaKSsk3q8WrjZG1x47ZNdEhnvdoX7w+XNnhul5tYT7rSOiYF iY+vM9qXFO8Xkz41aUe4WcWl5dZ7YLJ2BYtUWdut3qYC6eQxVa5sknxK4300sb+DK8u18WSfdgUL 1HtyQNvXW9unfbxM+8pLoESF9pNsAoHc8a8nvC7r6UFq0dB3cq+uzquR8LlLte+T7JeTyfslFZP3 NADMkHkbHq+5aEhVpV0q6wyrzWd/v8104wLtioS1y5523ahy6zGKgTodb61JCjpXU880c2vfVLeL hqb02MSU0umrqe7LdLYjUKcDJV3a2NCn/qaCSdpVoFUVtTrRWyQdLdeqJmtZOu+jCf0dXK/tLxxU r6QTAyXa4JMU9WjDtThesEzXZ/xavqcBIA3zc9rajS9Hy8LNetGephvu6VK4osga8QkPKnZ6kPW8 4eRtC1Wm8W3jHCMirtt5iYZUH4rK+uXfoe2BAQ0psX1p1+PVRlOOPnDlS9G+VG0w2S6ddqSqS0rd V7GyjfYlxfvFhOF7w1fTqgOqtc6zm6RdwfV1Oltbq7Nb19sjlWm+jybWrsKSAZ1o6NbZkkIrdKR7 vFy2Sbuv0tHbrfZAiQo/n2adJu8r0/ee03Tt+1R/lni0I8GE81sB4Nq6jkYerXOGqkoDypMkletA pEBSgZq3Vqs435pMClSUu0wrWedEjW8rVbaEtdkfUHF+c4rtPPhypD1lyttjfRvY2qE2n0/qTKwj NpJgVo9LG/+8zrA9NdpcEdDG/GMK1NRI+qjLSsn9J5eRDvd+ct1u91Tbkbouz75ylr21Q22T7ovH +yU6lKJNjrrSeG8Em1p0Ir9MVZqkXb5ClQW6FE8Z6byP3Ppb1jTr2T2D2hyJzQt7HGeP7d23SaOv TISb431plW31h3Gdycfe7bxHk3VcTcO+p/l+MWuHGIkEMGsyzp8/PzY6OqpLly7p4sWLunDhgg4d OqTGxkbjQkwfun38+HGtXr36atoLXL96G5T3Qu6NFQjsKdzmG2mfAWAavPLKKyounvzB2aYZLaax sVFr1qzR4sWLlZWVpaysLC1atEiZmZnxf9fRyCMwv/WePKbKR8KEKADAnEZ4BOaIYFP42pxHOJfN hZuJAwDScv1cMAMAAIBrjvAIAAAAY4RHAAAAGCM8AgAAwBjhEQAAAMYIjwAAADBGeAQAAIAxwiMA AACMER4BAABgjPAIAAAAY4RHAAAAGJvR8Hj77bdraGhoJqsEAAC4rrzzzju6/fbbZ63+GQ2Pt9xy iyKRiMbGxmayWgAAgOvCO++8o+9///u69dZbZ60NC2eyso9//OP66U9/qm984xszWS0AAMB14fbb b9enP/1p3XbbbbPWhhkNj5mZmbrrrrtmskoAAABMIy6YAQAAgDHCIwAAAIwRHgEAAGCM8AgAAABj hEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAY IzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADA GOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAA xgiPAAAAMEZ4BAAAgDHCIwAAAIwRUvMiVwAACOxJREFUHgEAAGCM8AgAAABjhEcAAAAYIzwCAADA GOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAA xgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAA MEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAA gDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAA AIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEA AGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgA AABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcA AAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwC AADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOER AAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiP AAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4 BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHC IwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwR HgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM 8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABj hEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAY IzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADA GOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAA xgiPAAAAMEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAA MEZ4BAAAgDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAA gDHCIwAAAIwRHgEAAGCM8AgAAABjhEcAAAAYIzwCAADAGOERAAAAxgiPAAAAMEZ4BAAAgDHCIwAA AIwRHgEAAGCM8AgAAABjhEcA+P/bu2PdNLIoAMNnZshzgItVHiDpLdstFeVWEc1qmy3SuXJcpUux zWobK09A5dax6J0HsFIEP0Jqx8MWmyGXAVvXEjEYvk8agYfJ5Ja/zjADANnEIwAA2cQjAADZxCMA ANnEIwAA2cQjAADZxCMAANnEIwAA2cQjAADZxCMAANnEIwAA2cQjAADZxCMAANnEIwAA2TqrOtHf /3xc1akAANhQK4nHv/58s4rTAACw4Vy2BgAgm3gEACCbeAQAIJt4BAAgm3gEACCbeAQAINvKnvMI APCULi4u1r2EjXd0dLTyc4pHAODZev369bqXsLGurq5+yXldtgYAIJt4BAAgm3gEACCbeAQAIJt4 BAAgm3gEAHiEydkgut3ubBucTZoPYjA4i0lz4OVxdLvdOL5c10p/DY/qAQDINDkbxP55P8Y3o+hF RMRlHHf3YxDjGB3OHRiDN9dxMr6JYW89a/1VTB4BALJcxr+nEScfhvGzBw/i/fgk4vzTz4nj5CwG ++fRH4+2LhwjxCMAQJ7J17h+1Y/DdhD29uLl5y/xNSIizuPtFodjhHgEAFidzxH9k5dx+jb57uOW EY8AADl6e/Hy83l8alfh5Gtcv/ot9iIiXvXjcPg+xv3z2N+2O2V+EI8AAFkO4o+TaE0VL+N4/zSi fxjpVere8EOcXL/5eSf2FnG3NQBApt5wFOMYxH73dLbv9483MTqImL9O3Yvh6GN8ae7E3qIvQIpH AIBH6A1HcTNc+kGMRumOg3h/c/NEq3o6LlsDAJBNPAIAkE08AgCQTTwCAJDNDTMAwLN1dXW17iXs nIV4nE6n61gHAMCjHB0drXsJW286nS60Ydk+AACA3dUEY9qF6XvfeQQAIJt4BAAg21w8FkWxrnUA ALABiqKYbem+xsLkUUACABARCxEZEVEu2wkAwG5KJ49NI6Z/mzwCADDTjsd7J4/3HQAAwO4oy3Jp QC5MHouimB0MAMBueigcI35MHsuynIVjWXp6DwDArirLMqqqiqqqlk8e5/74EZEAAOymqqrmhort y9idNByrqopO5/+fu3737t2alw4AwFPrdDoL0TgXkN++fZvWdR3fv3+fbbe3t3F7ext3d3ezra7r qOs6ptPpwuuyH80GAGCztK84p9PFZoj44sWL6HQ6s62ZRDavneZEzc705E00Nq9NMKbvI0I8AgA8 A3M3viTxmAZiE5HNvvYUspOeoH3yqqri7u4uqqoSjwAAz9xD8Zi+T8OxfcPMLB6bf9BEYFEUUdd1 FEWxNBrTy9XCEQBg86SNtuzXYpY9dSedRC6dPJZlGXVdR/O67Lbsh77nKCABAJ6Hex/8ncRjGpHt sJy72zoiIg3J9D9IJ5DNazsaxSMAwGZ7aPp43ySy/fl/IyUEg2JKmRcAAAAASUVORK5CYII= --_004_BL0PR1901MB4676C79F8C3637A844934BB4DBDB9BL0PR1901MB4676_-- From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 02:15:46 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 06:15:46 +0000 Received: from localhost ([127.0.0.1]:36247 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nupjm-0001Ua-9f for submit@debbugs.gnu.org; Sat, 28 May 2022 02:15:46 -0400 Received: from eggs.gnu.org ([209.51.188.92]:53224) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nupji-0001UL-Gf for 55666@debbugs.gnu.org; Sat, 28 May 2022 02:15:45 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52278) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nupjS-000186-O4; Sat, 28 May 2022 02:15:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=r/egZtAIhXb71SFMaWQe/610mTvGp/a9DngEOxXeNbo=; b=MSRmn9pZhaMr 0TaK7YiYKRJKfC0M3Fo5+o5C3+83UJjmwacBef7uV4iwbB3PF9J7J2HUB8sVJjZ7hOtVHUkEkhtc2 EZvwakgAliBacyix5Rj1e1C3vXf4QXY3htx9X9uO7TSO8mn2GKafZaHhLtnVHhruCTn6EV7oNq+ry 8aZDbTv/N+V/U1+iRsmbZIOvHExlhyz8LzJSdhQRpPgQ+EyULbkgNt0CgJqoR+dGisBK9IMkO59mI Owz+/xtdBK/aTERndPzToHIBNBqxKDnZuBHcmxoG76MdoFLXg+MeOQaQga4+eJL7AoP8eL+b4BMUh SKzKeg/AtD58S+9bry9Dog==; Received: from [87.69.77.57] (port=1944 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nupjS-00061K-36; Sat, 28 May 2022 02:15:26 -0400 Date: Sat, 28 May 2022 09:15:23 +0300 Message-Id: <83czfymbd0.fsf@gnu.org> From: Eli Zaretskii To: Ali Elshishini , Corwin Brust In-Reply-To: (message from Ali Elshishini on Sat, 28 May 2022 00:43:28 +0000) Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 55666 Cc: larsi@gnus.org, 55666@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > From: Ali Elshishini > CC: "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> > Date: Sat, 28 May 2022 00:43:28 +0000 > > Thanks for pointing out the announcement email > Unfortunately it doesn't include the SHA hashes for the windows files You never said in your original message that this is about the Windows binaries. The Windows precompiled binaries are produced by volunteers who are only loosely associated with the Emacs project. The project releases Emacs as source tarballs, and the SHA checksums for that are in the announcement. I've CC'ed Corwin, who produced the latest binaries of Emacs 28.1. For the Windows binaries, providing the SHA checksums is entirely up to the person(s) who makes the binaries available. > Also verify the signature on windows I am not sure if this is the expected output > for me look like it failed > > >From command line > > PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keyserver keyserver.ubuntu.com --recv-keys > 17E90D521672C04631B1183EE78DAE0F3115E06B > gpg: key E78DAE0F3115E06B: "Eli Zaretskii " not changed > gpg: Total number processed: 1 > gpg: unchanged: 1 > PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --verify .\emacs-28.1.zip.sig > gpg: assuming signed data in '.\emacs-28.1.zip' > gpg: Signature made 2022-04-21 4:11:30 PM Eastern Daylight Time > gpg: using RSA key ECE77CF417C76C1ACFCE7C2B5B6135511580F007 > gpg: Can't check signature: No public key > PS C:\downloads> You are using the wrong GPG key: my key was used to sign the source tarballs, not the Windows binary zip files. The Windows binaries were signed by Corwin Brust's key as the Download page says. You need to fetch that key, not mine. > I think adding the SHA hashes somewhere remains a valuable addition > using and verifying signature on windows is more complicated than it needs to be That may be so, but this activity is based on volunteers doing this on their free time. We can only ask them to do what their time and resources allow. From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 13:14:36 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 17:14:36 +0000 Received: from localhost ([127.0.0.1]:38817 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv01M-00020D-6i for submit@debbugs.gnu.org; Sat, 28 May 2022 13:14:36 -0400 Received: from mail-mw2nam10olkn2080.outbound.protection.outlook.com ([40.92.42.80]:45216 helo=NAM10-MW2-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv01J-0001zy-K7 for 55666@debbugs.gnu.org; Sat, 28 May 2022 13:14:34 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CD+a2Npjk2EoLczfGJcAOdbyAkqDEnwo99htPdyiF/A75192JuvgkML7UNomOiF7/3ou3aWqMALE+HL1vPUuEgbWlUQumqV34Hus+YitMDGzo20x5zGiMNA3UNueMCK2Wdg/94Uz2DEjiGLdBX3AZJfd+KVkfQZguSopT6HX+/JWEMlkzBSQgAdJqQ1K5RM4Gs+IgMnAV1iRjD8ZO7EJ4w8SmOM2RouP/WMhgPfR8Vo7HfxdBcEw5QlwN0qRSGuG8i9GqrkfHe1EwSBEmCzxZOjCnCbiWZC9AiHf883irtyzb+TgrKGGGcjOASPKLO2Uxhoq5q4GH/XTs1GBX04U4w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/1JvURuTp85qwbC6DpENmBoBH8tPbd/a/aNc55X5E0I=; b=VH+PgvY1O1InJ07SXUyQgP4PDhQlqVDgGwOXafGDPpNads9fKg0l8RDbVk3TWnbkfvgw5SiTmUy2vwFpGJ9mNrXhiWnKiEz0tx4lZQRKrLhpMWJIxO7MJCQfQ79b5FPaQwlI5Pi0YClYUwBg896AQh02qUBh8whNRGUNzCO5WEOB+KSVZ7XdcM+9IBOsOo4tK/fCA8fOAZZRZi4xXa2leBPpNfH4R6zB54tqvdekZjMdxzOp/p19W3lmm4NF7Q6Q4bA5/TX4j1feCA2IWqLzorwIae+8dgAGY0zZXkYvsj86nk5lTMPWb1/lsYUFlZQBkCMN6+/1mtULZXUjRczbKg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/1JvURuTp85qwbC6DpENmBoBH8tPbd/a/aNc55X5E0I=; b=b6ncL9GM3eDuY1AX9yaAX1icE3m6kBaOz4b0iMJkykXD3D5tpBCZ9WKWofHZSOOsimIon1CkFu7N/v5L+5DLxw6s/03pagKS6M9gq04Fw7GNKXfuYxkWp+K+sozrIPudeViPj8X+Q4g3K5A9Zj+3rM8/nvqeCfkRWtZzXygVb6/RO2ajhA9U4K7VOM+SXcDzXOLoxnYSZXFbj3hCkQ4EB9KIk88eRsA5RGwmuQeWA5flKjgaT2DGFaFRcT9C0eDhGQqExlYltgWR7rcyqaxGb/NCuFBiWDa6gqAJwhPafWc+W8eQOEEcmoN2TfzAb9jlUWDWpM18kZ0wjLMjgSCj0g== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by BY3PR19MB4962.namprd19.prod.outlook.com (2603:10b6:a03:36a::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.17; Sat, 28 May 2022 17:14:26 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618%7]) with mapi id 15.20.5293.017; Sat, 28 May 2022 17:14:26 +0000 From: Ali Elshishini To: Eli Zaretskii , Corwin Brust Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAY91+AAM0Q6IAAXPtBgAC27iU= Date: Sat, 28 May 2022 17:14:26 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> In-Reply-To: <83czfymbd0.fsf@gnu.org> Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: ab81285d-4750-803e-ebb3-a24dd2d8fac6 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [Q55NyIAWF2a5sqdzqhP+esJNxpe1+dg/E5WarrgK/RI=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 017e0e04-1f09-48a8-0046-08da40cd84b2 x-ms-traffictypediagnostic: BY3PR19MB4962:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: R3tWEOI+TZoVW0GbeIomCVnu7GLxL9g/TCqnFXXOvR9c1uxkuNL3uGg/zip9wXflsM0d70+2yTrZkHZsDBltmWBooWyGh4lZgs5uo6jO585FQcOO8PQdKUHX5Devl07Pikrio4DhaVAwmGk4lN0T2m3uHFvvCmHl9MqLPmsZitl9fhasgD4m2BzOyTnN1zbvky7zsUX4ZelPIXDloJAMeFlEbeD1IlVum5MpKyAcMUFvuxB6nfTYQRB/I8FbRSWhoMwqHVYbJqV/oalggxf/t8ZTQUOtnQLvq/v1m99MvGU7gId/rC7PL4rUHtYOae7C/B6FuIt8y0hNEeYkeniSTENdfzB0lkBhmTpSbKVDUD3doldM4c3BW9Pyu7lnQjc29pMiMwPxKEvd5CpqyPX5JI5qABzt0t3JWgeyh4EeLlX/puCGGswBfQpNt+nVn7dRYLoBnL1vTMdX55GWrKBpBNAIQPTBffONwA3XlnSLca4//xsDqiWXceDeEIk9IKAv76odwgoKOmrhTNsLj78aMZVafNzCjCXBg+KSHjAV/eDPhFlAs/nvVgjT/3K9CM8eLFeQr9uErf7faXuE9+VAiA== x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?fr/DNTR1DePm/QCXISYfHEoeNF0njqNRMIGMVHdE1Qb58o/et7PTk14mqH?= =?iso-8859-1?Q?1okYkrVKi9wTs4WU9ZSao/MYMF50dNO8PoFpnSFZjsWiWJ5qAMKuSmlbp7?= =?iso-8859-1?Q?guSvie/VZZCZM3PmnecUzDmI24WwiooB/W90aVefh4PD+WghL/GLZI18fx?= =?iso-8859-1?Q?qYZE43d4W/DevmSlIHiOqrxHyYWd1L0flrxLgwMN4Fqs1ltH09yO04qd9a?= =?iso-8859-1?Q?cWIByuGmMptOk7CDfcFkMdCbmo5wnSDqjJJzUfy2j97dc4O19BsuRIQNaP?= =?iso-8859-1?Q?dHIlZAumSFEfCoHU1iGuHgubTbLX4LOExl3NQmsk7cYPCDXWXTola5W/LT?= =?iso-8859-1?Q?6dpQ7EUWhkm8tpy9j2H3OgsETsMSNklW9jWZzOn+MAP3BZcPcCMfd8jVYY?= =?iso-8859-1?Q?LGI2qLTcvJ+5XEb8TpWpXkjQ73May19f6e359CXBapTKowbwZ7ABbW2iCn?= =?iso-8859-1?Q?HAZPBELwOPFvJQnsClqwMDLbvUOSLwfHto/GhjscKZyb6soG9L0vYtY8eJ?= =?iso-8859-1?Q?wYdFuljtY+9eP2tf0hko+xOFFNfWUSi4LpbkQAS6wXmsuZnOz1lRGvU47t?= =?iso-8859-1?Q?WUZ2N8b4Mik+yhrYOaX3hXBqqztrIOz5gQkcV7gaAYBJ0RfhVo2Sg1u00G?= =?iso-8859-1?Q?ntTi/aZGmoCL1cZz6PNcNPvg5pEWXUk/OQ/d3P1UzsliBQ0X/wEFsWjLzi?= =?iso-8859-1?Q?Kq3f3jVLBrt4dPFW6MGuU0KlAk85eqb2LIJPhqmeIz4Phj9kyOGVYgMjdj?= =?iso-8859-1?Q?dQS/D04sX+yOmMPkH/sqZLPpbco3YuL95TE/MLHCTCjbcBRzM6bbOg/QQQ?= =?iso-8859-1?Q?kH5EqV8b5XN+137a4YjsCMmHtSJQylCaZ1tjmPJwuLvL2Ai6AuPT4cJtuj?= =?iso-8859-1?Q?X6Ru4hRLdXcXbSEnMhpuwzsTW40netNUarveKK1K3w+YodCMdQumXML5RC?= =?iso-8859-1?Q?ZQkPMBbRQ8uEoGdoNnbPt0c8FSwDRuyiNYvN2a37RRp83aryCcUMwmpq8d?= =?iso-8859-1?Q?wg4YbzpGkQW2hzRxXfWkZYSmOY5HdbMGcLPqvpTEJOuAuY4VHMbPQtlxk9?= =?iso-8859-1?Q?2lr7rihf98iJU5X31zh3PZkIsI4o2vNI8DeMOV9OzjOIMxp/UnjTqoNH8a?= =?iso-8859-1?Q?7y1qN1/4FzimZ8rjQ3CW5jDv2bB2HfMANeShHKVBTr/3dkxmcMuF6vTs/G?= =?iso-8859-1?Q?FNscG07W9353RG7IgzZ7/16itykPJvukEbvvwI4pU3kXL5ymDhQBU1KrJA?= =?iso-8859-1?Q?iSxwI7PnIKfZApAcGns33bXLJY8407NqodxlhTCc/V+15Ih4PObmsopivZ?= =?iso-8859-1?Q?O7lz+IcVpaDltz65Fsfqq5RRmJRDQBmd2Fq+KVV6ZuCDB9LfW8eAE/Jqp+?= =?iso-8859-1?Q?zX/3EnzvQCsQRbOk8bMclyUKVAeri6qj89rMmNuCj7sWdCBPTyR1iID/IG?= =?iso-8859-1?Q?E3KAfJAAeYCCQr6RzKzkni6h3UoJh6rq6NuYyFT9nJUPwJITZLV0Ecfopx?= =?iso-8859-1?Q?A=3D?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB4680CDBB033C8BB20DCC3558DBDB9DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 017e0e04-1f09-48a8-0046-08da40cd84b2 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2022 17:14:26.4765 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR19MB4962 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55666 Cc: "larsi@gnus.org" , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_000_DM5PR19MB4680CDBB033C8BB20DCC3558DBDB9DM5PR19MB4680namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Corwin, Can you please consider including a SHA-256 hash for the windows binaries Also can you please share your version of this command gpg --keyserver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B1183EE7= 8DAE0F3115E06B So we may be able to verify the signature Or add any other instruction on how to verify the signature on Windows And thanks ELI for all the info you provided Thanks Ali --_000_DM5PR19MB4680CDBB033C8BB20DCC3558DBDB9DM5PR19MB4680namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Corwin,

Can you please consider including a SHA-256 hash for the windows binaries&n= bsp;
Also can you please share your version of this command 

gpg --keyserver keyser= ver.ubuntu.com --recv-keys 17E90D521672C04631B1183EE78DAE0F3115E06B

So we may be able to verify the signature 
Or add any other instruction on how to verify the signature on Windows = ;

And thanks ELI for all the info you provided 

Thanks
Ali


--_000_DM5PR19MB4680CDBB033C8BB20DCC3558DBDB9DM5PR19MB4680namp_-- From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 15:06:27 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 19:06:27 +0000 Received: from localhost ([127.0.0.1]:38897 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv1la-0004nQ-Tm for submit@debbugs.gnu.org; Sat, 28 May 2022 15:06:27 -0400 Received: from eggs.gnu.org ([209.51.188.92]:32792) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv1lW-0004nA-Bb for 55666@debbugs.gnu.org; Sat, 28 May 2022 15:06:25 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:60986) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nv1lQ-0008BB-AJ; Sat, 28 May 2022 15:06:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=djO92huXvosubrnog+hesOCIAzUnFhzQmMqoVgSNUfw=; b=rgHSKqXNJYtC KdKDnJmWr8MktOvfGwd99rJkqiK/guqCBiiSAenCMmsNzRbJ4Y1mgmwipX83gYAEbCN1pLWC5x+ry Lqyb6OQX8LgYe1vsg8AgIWMYbxuYY8ozy7LQNh+UdH0bW3sQJsoW6Sc89S4H0Jwgbp2x98LA9BaLy 6wtddzs8RSPs9+Hi7YJEM1RGvZ+ANyj2nkJVqvFGlLMxAnCplo9pCsXryWX+p1evQ6mOSh78xZj8l NDCbOUtR+g8iQzDocPFa+IgIGd2z3vAi5XwC12DrTWNAjUdUbJe/ohEo4PZ5UhNMSDWlCeyWP+2e5 2DmU4HE2/BfzVcKAhqky8A==; Received: from [87.69.77.57] (port=2448 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nv1lP-0004i1-1M; Sat, 28 May 2022 15:06:16 -0400 Date: Sat, 28 May 2022 22:06:12 +0300 Message-Id: <83k0a5lbob.fsf@gnu.org> From: Eli Zaretskii To: Ali Elshishini In-Reply-To: (message from Ali Elshishini on Sat, 28 May 2022 17:14:26 +0000) Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 55666 Cc: larsi@gnus.org, corwin@bru.st, 55666@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > From: Ali Elshishini > CC: "larsi@gnus.org" , "55666@debbugs.gnu.org" > <55666@debbugs.gnu.org> > Date: Sat, 28 May 2022 17:14:26 +0000 > > Also can you please share your version of this command > > gpg --keyserver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B1183EE78DAE0F3115E06B That's easy: you need to use the correct key signature. The signature is shown on the download page: ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007 From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 15:18:00 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 19:18:00 +0000 Received: from localhost ([127.0.0.1]:38912 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv1wm-00054E-8P for submit@debbugs.gnu.org; Sat, 28 May 2022 15:18:00 -0400 Received: from mail-co1nam11olkn2087.outbound.protection.outlook.com ([40.92.18.87]:19168 helo=NAM11-CO1-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv1wi-00053y-LG for 55666@debbugs.gnu.org; Sat, 28 May 2022 15:17:58 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DP7U8s5FADlOSCQXQYo8LiFzRp7AzPv086UbL3w2BnGDH5OlmIgmrlKURftzwiri+vSTYXzlY7er13YgSc8uWMcCV3JTXtpFDXzCJRSceEdHiK2gkzioojZ+q2SJ9LzV/TnfFlI1lKxana3+sfsbHGWGYo6F0VI7R7hBBKWg9c2zZMb+brBM+0QQnpVwEt6xOhaZ3ffEuiqw1qGT9CRWgTBIYeNJlcVMzhXMMpVclDXIYS76jLOg3Pb7fBeQLiHi+1L04HYJ2RfVfJGXtfzVYwzOe9eevgt4cOkJCYbro2E/In4B1oiqcOH0ZbqysnhF5ljKztWqd2yvuAG2L+uz2w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Zah9nR4vRECawtv2kNH/XHyXhePgujeDFc1bARMHryM=; b=biAiUzVsFaR43E71oSoO5VE0Rwo3n4+iOdSL1r3efXIjanVsOHhh4Av9j0J17+FwinKoDnjTyVE2HOEzqYf/Vv5uIe0OjCdHgRnPzxLYFquEQR9r9AJlueU16LgjC68IcIZsTUxeguW67ZIsBLQuHB0lYJONGb81cwi7maOaaykOC0F6SvcjTurd3IEB/MyoEl0V6DyyASPdBUW9jH7Q3PlXeZfe5YVsqXAQfJfxw5e71Cg8XbateA6YiOgrZhOR8e71aGZItimE5K+fU5Y+t1Xh67Uz97OopFHJirwGL04MAfi/2M2SSvVv01wIqVUqBhmvF3vJ9TogPyQ/uKFEYA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Zah9nR4vRECawtv2kNH/XHyXhePgujeDFc1bARMHryM=; b=W3IhkByHSgZa8EvWTmwecxeq4+83nlvWWWsKoEncLMn90ac2u9HXNhZ+nWO7wDKBGFFmdsCJEW5tK43rgzTBtK9xReFR8UCtZ2vys/J9+UUofwOyXbTpI0LPDPLTjyvIEgjHbJNFtj8MuH13NlKuw0fegnhTKFqzLoxAJUUu6LB7Cr7cRUJauoSv9sKIUr748HQZvrnpzCeBbTIU2+CLSTp5TslI+1YGUV5EorlZ7A6O4LnWaF40PtDGr6SsgBbPProD/VkaUxnIJi2jY1ELh8bwQi2HxldbcsEIm6UT+BiipvYL3Yx6U3uPGciGosJHx3JPXoi7aIdUwwUQ61KvCQ== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by PH7PR19MB5583.namprd19.prod.outlook.com (2603:10b6:510:136::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.16; Sat, 28 May 2022 19:17:49 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618%7]) with mapi id 15.20.5293.017; Sat, 28 May 2022 19:17:49 +0000 From: Ali Elshishini To: Eli Zaretskii Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAY91+AAM0Q6IAAXPtBgAC27iWAACBmDYAAAmXZ Date: Sat, 28 May 2022 19:17:49 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> <83k0a5lbob.fsf@gnu.org> In-Reply-To: <83k0a5lbob.fsf@gnu.org> Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: d91b4b7d-3d8f-66a2-c005-7a34ab9f5f58 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [JlZbrUwGvYAPzoxnQKaDkd1efl+PONiN8ZmCLOLKZpw=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 523924fb-9423-4f0d-3c9a-08da40dec12f x-ms-traffictypediagnostic: PH7PR19MB5583:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?crjD01aOwKP5GRHdmjO2J1UutnNsmx+N8E9d4zKtAS18fgkZsRq+PS7oxn?= =?iso-8859-1?Q?A51Sw/JKzO5xtcyShrtBRghYB9Mi7ONgEad90C2ziV9Dk2mr3OWszzCLD9?= =?iso-8859-1?Q?hAmkPiuOsI6nB0clIaTYhFQRe7+ZRBAw5D3VxnCPsYwCoXNxmvzqMrKmgg?= =?iso-8859-1?Q?gAMNa6SjLiY9YXyTxCYkr3RxA0XgnTtSo+PKE1jP9vJEEkW+EuGSvm0we2?= =?iso-8859-1?Q?lKncww6/kHpMeKf6o3du0NeXmUwU+++97cloUX3cHJse4byYlP71+1M25r?= =?iso-8859-1?Q?VrtSw2kyrIdOCEBiIDZLg5U23AGT/GlcdFmrv+b6lXN/cmlMsZU6Q2/Zo4?= =?iso-8859-1?Q?aUL6RAs0vVfbnLL/NHxMTCn5TlK4AnWWY8btKIQgwhWy5YF4bXPMxeTwV5?= =?iso-8859-1?Q?4dsAmU9lHa9oa5nPCnet0sq4ldfUM6BBlj7snB1ss1OAemUvvQWji/8Tqf?= =?iso-8859-1?Q?+P1VJU6pJ8iw+fiA9N0X1LEZ3ZKIWxkVkQSgJMf89BfPCZK85nDDVPwfC2?= =?iso-8859-1?Q?FClZ7L0np4R91AvO9OMHyKYO7jCBRy7fvuxHFEi8oQLdcoDlJPUwMZNLu1?= =?iso-8859-1?Q?yp4vqQIAXPhjrqEfdoP/CNY27/V32SceAZZSZ42SIYrV0oLpP3eAMcQmeR?= =?iso-8859-1?Q?+685lXCU6eFWkxpAkqKl/t1MxwZagiLetEXmW1pwD9ImyGyhUWUW1n97qm?= =?iso-8859-1?Q?hOxmvXz7ISLpLejGe5w/vwooPg1I9GcQw5vk1WhraHb8Oi/zEJN/MfdkM0?= =?iso-8859-1?Q?duAKmBpev8+ZWYXjT/uUPQmD9FmazpuKWyrlNbC7MQiQAEZR0WOYEIybid?= =?iso-8859-1?Q?GntrbAnaZJXozK35QyCIomicuXF3OKJzl19gdaVqUhKIEd5asR8Tz9UduQ?= =?iso-8859-1?Q?gtP0DRnWahuWPhRcO7O3UPpkUx0z0LLLR2zghSYCbyhRhjBxRJjyOmAW3u?= =?iso-8859-1?Q?AFZ1W1aE6EjzXrRIGC3T08FMzxOkdyRROR34EzvU7J1VwOU9SYpSojcZcZ?= =?iso-8859-1?Q?W77NBX7/Ms0yIo2CQThLpyMaOf7lpuPWH0kYdRKNZOeB3YRwUNYW/w4QHu?= =?iso-8859-1?Q?ElO7eueXceIWwx5bmzMIbVPF4q+GYzWx9tT8Iz/YkT338GqWBw6b+fcgN7?= =?iso-8859-1?Q?4sziPegPKGa7ZRIxiw2B/nn7sXxPx15Mw39Yx1QZRfhw06cz38q0sQGXKu?= =?iso-8859-1?Q?KECJF4Gs7rYlJjtbux8Lp+Src3cvHkLHPz9N4fUudPkkZZCdvA7I0U+/94?= =?iso-8859-1?Q?dOsd11Kjd9LY5qotBPTsRVHvf9R06QAnZ9NbtLjT34FFTkiwmEfb21yaEg?= =?iso-8859-1?Q?EJghsujTPOYzZWixCcrP//N0V3ZYPOdL9Nl/MKDuY1728RgGE/rBWIHQGC?= =?iso-8859-1?Q?8ksYkgS53FBQCvnU2pRS6EefWbGUbFBEXD7kxN1pj3mlHYoIGmsh4LS4Ue?= =?iso-8859-1?Q?suQ6G37ktAW8WtmyP0l0efBlAjyQr6vIqyQhhQQvYslLYA3qagZpx7g/BM?= =?iso-8859-1?Q?o=3D?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 523924fb-9423-4f0d-3c9a-08da40dec12f X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2022 19:17:49.3893 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR19MB5583 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55666 Cc: "larsi@gnus.org" , "corwin@bru.st" , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Thanks All But again, verifying the signature on windows doesn't seem to instill confi= dence at all Corvwin doesnt have a certified key I am not a certificate expert, so I dont know how all of this works So, I still hope Corwin or the Windows Binaries volunteers will still be a= ble to provide SHA-256 hashes PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keyserver keyserv= er.ubuntu.com --recv-keys ECE77CF417C76C1ACFCE7C2B5B6135511580F007 gpg: key 5B6135511580F007: public key "Corwin Brust " import= ed gpg: Total number processed: 1 gpg: imported: 1 PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --verify .\emacs-28= .1.zip.sig gpg: assuming signed data in '.\emacs-28.1.zip' gpg: Signature made 2022-04-21 4:11:30 PM Eastern Daylight Time gpg: using RSA key ECE77CF417C76C1ACFCE7C2B5B6135511580F007 gpg: Good signature from "Corwin Brust " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owne= r. Primary key fingerprint: ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007 Regards Ali ________________________________ From: Eli Zaretskii Sent: May 28, 2022 3:06 PM To: Ali Elshishini Cc: corwin@bru.st ; larsi@gnus.org ; 55666@d= ebbugs.gnu.org <55666@debbugs.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads > From: Ali Elshishini > CC: "larsi@gnus.org" , "55666@debbugs.gnu.org" > <55666@debbugs.gnu.org> > Date: Sat, 28 May 2022 17:14:26 +0000 > > Also can you please share your version of this command > > gpg --keyserver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B1183E= E78DAE0F3115E06B That's easy: you need to use the correct key signature. The signature is shown on the download page: ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007 --_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Thanks All

But again, verifying the signature on windows doesn't seem to instill confi= dence at all
Corvwin  doesnt have a certified key 
I am not a certificate expert, so I dont know how all of this works 
So,  I still hope Corwin or the Windows Binaries volunteers will still= be able to provide 
SHA-256 hashes 

PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keys= erver keyserver.ubuntu.com --recv-keys ECE77CF417C76C1ACFCE7C2B5B6135511580= F007
gpg: key 5B6135511580F007: public key "Corwin Brust <corwin@br= u.st>" imported
gpg: Total number processed: 1
gpg:               imported: 1

PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg -= -verify .\emacs-28.1.zip.sig
gpg: assuming signed data in '.\emacs-28.1.zip'
gpg: Signature made 2022-04-21 4:11:30 PM Eastern Daylight Time
gpg:                using RSA = key ECE77CF417C76C1ACFCE7C2B5B6135511580F007
gpg: Good signature from "Corwin Brust <corwin@bru.st>"= ; [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the= signature belongs to the owner.
Primary key fingerprint: ECE7 7CF4 17C7 6C1A CFCE  7C2B 5B61 3551 1580= F007


Regards
Ali 
From:<= /b> Eli Zaretskii <eliz@gnu.org>
Sent: May 28, 2022 3:06 PM
To: Ali Elshishini <shishini@outlook.com>
Cc: corwin@bru.st <corwin@bru.st>; larsi@gnus.org <larsi@gn= us.org>; 55666@debbugs.gnu.org <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
> From: Ali Elshishini <shishini@outlook.com= >
> CC: "larsi@gnus.org" <larsi@gnus.org>, "55666@deb= bugs.gnu.org"
>        <55666@debbugs.gnu.org>= ;
> Date: Sat, 28 May 2022 17:14:26 +0000
>
> Also can you please share your version of this command
>
> gpg --keyserver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B11= 83EE78DAE0F3115E06B

That's easy: you need to use the correct key signature.  The signature=
is shown on the download page:

   ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007

--_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_-- From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 15:27:29 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 19:27:30 +0000 Received: from localhost ([127.0.0.1]:38922 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv25x-0005IN-Mc for submit@debbugs.gnu.org; Sat, 28 May 2022 15:27:29 -0400 Received: from eggs.gnu.org ([209.51.188.92]:36484) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv25v-0005IB-RC for 55666@debbugs.gnu.org; Sat, 28 May 2022 15:27:28 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:33232) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nv25q-0002mt-2i; Sat, 28 May 2022 15:27:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=ZszkCgyYw4fnPAcHs4SByH1Fs+X480DRReiFQxR/71o=; b=c3VglNGWlLIN uE4ngh+uDoE5aD2VtPKP216ZqC00quWZPnXBgpremkZ5gPdMq6Q3HlzP4JuAJOO9YznTtiXc7VxkS N/ThPY9lrDtCGN0kSZW5yLF3jNU1iP9zn+YzdPmkKWXMKhsWSiEGjqLsmSnWxSlsthRmeVq5pnSQ2 VrHJTEHotihZw4TCvNXOAw0oBuxJuW4ejIknjMvhnrNvvZqMVATgZn4kmEwzHZWtXPi/mRuBy/sir EBXPfoEEL93H1Ggd//sK6rTQAD5nWW47epSLow6nmk8IFQbRejyEl2OlvW+qJyLaTKQDO1zSgrF6V ioZIOa85dMce7ybGmz8MVg==; Received: from [87.69.77.57] (port=3742 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nv25o-0000g6-H1; Sat, 28 May 2022 15:27:21 -0400 Date: Sat, 28 May 2022 22:27:18 +0300 Message-Id: <83ee0dlap5.fsf@gnu.org> From: Eli Zaretskii To: Ali Elshishini In-Reply-To: (message from Ali Elshishini on Sat, 28 May 2022 19:17:49 +0000) Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> <83k0a5lbob.fsf@gnu.org> X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 55666 Cc: larsi@gnus.org, corwin@bru.st, 55666@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > From: Ali Elshishini > CC: "corwin@bru.st" , "larsi@gnus.org" , > "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> > Date: Sat, 28 May 2022 19:17:49 +0000 > > But again, verifying the signature on windows doesn't seem to instill confidence at all > Corvwin doesnt have a certified key > I am not a certificate expert, so I dont know how all of this works > > So, I still hope Corwin or the Windows Binaries volunteers will still be able to provide > SHA-256 hashes Hey, I just answered a question you asked, that's all. I assumed that if you are asking it, it is important for you to know the answer. From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 16:31:42 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 20:31:42 +0000 Received: from localhost ([127.0.0.1]:38967 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv366-0006qu-32 for submit@debbugs.gnu.org; Sat, 28 May 2022 16:31:42 -0400 Received: from mail-bn8nam11olkn2065.outbound.protection.outlook.com ([40.92.20.65]:14816 helo=NAM11-BN8-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv362-0006qg-QF for 55666@debbugs.gnu.org; Sat, 28 May 2022 16:31:40 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FZM7xxbgBBhnJY09dO3hrjmzXMLhAxOW531oIUA1Lpg3gdH613xJrhCIitn5E9dxFFAVzRI1RLzQo6YLWr/JoLEEWXEuqbJHdtO/TuesHfJ+5Nxu9YMcHppjHYor7aa2Tpc8xeOiDYf1b73YwDmAh9fxTCVXC9qWRbLW6skgxjeggzeX3wqxR/jJ/EcPcY0sKbUcLWsSoFE9uw20QIMVbwCaBPfa1iXzUsyGLvDdqu+VjhAquuPs1r3ugS3ETdTbQg09Hh27GK4gb+9YVT60fewYNuTRhbkdoqP/EQpZR/YfL/FDvesDxSYjIU2+hcxo7N02Q/SSTTFLRC0TFDJPVg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=JNqknXeE6A0fDFBoYFhJStDpnsOZh+MeXDEAou9KI8E=; b=TuCet4CZy/MfTIk3P2NJet8Wg0/kYv2RuRdk0aLdKwVmhZgA18ggGhyOHvUZZm26uIgFexIBXShEQwU1KrP8uxJLrnv43nBjonIBkRH5lcZq4MRfl/b9VXZO2cMdS/Z9UZWF3Xrbg46F4vXGDg/Udq2YKrmQmM3Zpo8ruxg3y9PemiuVq74jObZcQ+QsL7P6tKyNEm6asFfMscDCieCIT4UEEPTzgMly/h+aY/rhGNQbqhGvGx6VZOJP8463lHaanPm8keyFuuyKrpELoNcf1Z8MFs7YmUDrAmISlPp1SFdqJeJtZW4qpxGUqIpW/vHED149e7LZOfj7K/PtW6dE9A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JNqknXeE6A0fDFBoYFhJStDpnsOZh+MeXDEAou9KI8E=; b=kvptwA7lUDp3m8BAymOabIj7t9kTA1uoFuEzxqIzTwJRIaP9dQXQHcsiAKNt0ubcJ26CTQ4FDq537QJxzyWh6rXOpWcyHLuyU6eXIwnVUaE2evh5smA1ayoTemTzW9bm4zCogMsap8genau8+Zn6VuxtjvU3TGSbmJ8xFJHpYSW/UsrwTu7QdEJUfqj7rJa8qR0wTfWbJ877h5cg1W9KfXnIZDT1apywxXf/aWpVu9mnuiCA9FDtzrKZffojskn85n8KO2cGxhkMt9+mMkYZU8S3mXAr0bMXzx+sSdRe+moQN0Lpng95A1xuRIEu4nrH0AzY+YsXH75pWG8s0SrJVg== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by MN2PR19MB3118.namprd19.prod.outlook.com (2603:10b6:208:154::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.18; Sat, 28 May 2022 20:31:32 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618%7]) with mapi id 15.20.5293.017; Sat, 28 May 2022 20:31:32 +0000 From: Ali Elshishini To: Eli Zaretskii Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAY91+AAM0Q6IAAXPtBgAC27iWAACBmDYAAAmXZgAADfnGAABDTHA== Date: Sat, 28 May 2022 20:31:32 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> <83k0a5lbob.fsf@gnu.org> <83ee0dlap5.fsf@gnu.org> In-Reply-To: <83ee0dlap5.fsf@gnu.org> Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: 99d46759-ad5b-3c9d-79d1-4d0e347286b5 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [WGNVW6WqCHIkCYn4dcI00+/JlyTUBsq9zZHhRoEgm0w=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 94316122-0cb8-4ef0-aec6-08da40e90d5b x-ms-traffictypediagnostic: MN2PR19MB3118:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?GSIKdYMeXfb9yideRU7YkWEptPMnUXLmcIfjWVsUIMb9bYfucil/bWyXNu?= =?iso-8859-1?Q?XsXSwoAiERx/p26c/YlfncoVrVHoRT5+xJhH/BSZz8klgQVC3qhD6ByB6V?= =?iso-8859-1?Q?8sVG0vQSgr4oleIEFXOe8BLKpY4zVukc9V0fvTKHbZnzrMtFkoFxFG2/Wk?= =?iso-8859-1?Q?cj9Xgviz09DY3BVeKWdv+b9ZVzR3lNuFZkBDMxpL9xDtNtzlJq9391Ldff?= =?iso-8859-1?Q?FEhAdf8Xo+26RKmsXIfpP4w/xQZIitbYRTDz2n8s4Z4Ymfjx6SZtrSZ08T?= =?iso-8859-1?Q?FWL+r/HYQ9sOUdhWFw/XmJXJ7H8Zv88pnLAW/lONNuBWF37Si37m32SU9s?= =?iso-8859-1?Q?o0+AWydbLIc04o5torfncOZm49AN6ifFvwsu3oZu6P/gKcds6VZWfo+BUZ?= =?iso-8859-1?Q?72ujU9Llj8BfFTRRvQgPSxFz0Ty3SLhe0z50kSsNTQS9ZXcEDHv9s/eNTy?= =?iso-8859-1?Q?SmCO+VoejulBvd7n9ZzvUhXCGv6+2Z5Ws5dK+9Ze+K/mPdbBkR8PDmRgOU?= =?iso-8859-1?Q?ETiWYR42OxRBVJr7ZS0+sxDsUX8X5uX1zdjw1gCcAv5ix9qOwmT9xzQW4D?= =?iso-8859-1?Q?gJTS81w5LaPI1EvXfAG970efjYX+mPPt6j79BNU/teX6cgDKwGu+xOddwR?= =?iso-8859-1?Q?CCmXWtnepl3qiwzE79dyaJuzTqoTyA2ykhxKGDCMQjLSfI9LL5B7GZvxyd?= =?iso-8859-1?Q?LwPYlke0c7FCr5dTaa/12EOTkjHYSUCsFQQop3Xp4WPf1Oyj9nLnv2Wjx6?= =?iso-8859-1?Q?uGqXZ1VClDokkG0v8Wd0ctjCJgaE7UOaI7nRknAdut2M9evyzH+1QDTDve?= =?iso-8859-1?Q?2xafDxZkScc/9IieSjtQvip7o40tie1/Y5nMgqGq0KSsu1Cy1LteP4Vl48?= =?iso-8859-1?Q?RfR/cxouWmKj1yhdVA9m/KTAFxT9/FHt/uLWC1MAHn4wjUPicXs8rCeWTo?= =?iso-8859-1?Q?+wyXhvNY0GDyN9eSvOlsCvtPZi8gTAiN53efI9OpvLtHvS+Mv6AmU6U9vK?= =?iso-8859-1?Q?wi/vpleWi5pb6Mghq2pS8AU/dx7dFNyYtG3AhUwWX6whZRLzo+2+Y3H4TR?= =?iso-8859-1?Q?HEnS19CiQJZ6yOx1hhOjJHHaMvP/qFJIEPS5IC8xJchtG40VfTsto1RiVx?= =?iso-8859-1?Q?DYe6CNKu8beMsIRTsx8eDfGo2YL9WCRVBR/r4WDYv3uEizy1v2qvl9dJOY?= =?iso-8859-1?Q?ep7oawRUEKJbulWD0b6UtseHcN0BwD/hkEjCRHuh5dWK6jZuxuEmZa+IgT?= =?iso-8859-1?Q?Rj5MKl1fRCj1molI8NErVGSWwLT4x8ciMiOKrfa0x945RNB++aetoghvYO?= =?iso-8859-1?Q?ZlumHTxeuCBwxZH4ivQTgwXqjEcJldlCUyB7MToCNP8ojzPFGXmlTKMqEy?= =?iso-8859-1?Q?E3iQ9LRVtfVBPlMacF7rG1loEz0iOrBNSI/gzKJ40qpmZ5F23ikqA0imlU?= =?iso-8859-1?Q?WoKOM4+Tos+yAGw5JPrp8Wg3x/+YDN9MIFb8262fks3Xknz1IqhZaBkxMi?= =?iso-8859-1?Q?Q=3D?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB4680F0BD8C740A3BF8C55077DBDB9DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 94316122-0cb8-4ef0-aec6-08da40e90d5b X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2022 20:31:32.1391 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR19MB3118 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55666 Cc: "larsi@gnus.org" , "corwin@bru.st" , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_000_DM5PR19MB4680F0BD8C740A3BF8C55077DBDB9DM5PR19MB4680namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I apologize if it sounded like I am coming out too strong in any way I really appreciate you taking the time to reply And I completely understand that neither you or Corwin, have any obligation= to fix this issue or enhance the situation Thanks Ali ________________________________ From: Eli Zaretskii Sent: May 28, 2022 3:27 PM To: Ali Elshishini Cc: corwin@bru.st ; larsi@gnus.org ; 55666@d= ebbugs.gnu.org <55666@debbugs.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Hey, I just answered a question you asked, that's all. I assumed that if you are asking it, it is important for you to know the answer. --_000_DM5PR19MB4680F0BD8C740A3BF8C55077DBDB9DM5PR19MB4680namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I apologize if it sounded like I am coming out too strong in any way
I really appreciate you taking the time to reply

And I completely understand that neither you or Corwin, have any obligation= to fix this issue or enhance the situation  

Thanks
Ali 
From: Eli Zaretskii <eli= z@gnu.org>
Sent: May 28, 2022 3:27 PM
To: Ali Elshishini <shishini@outlook.com>
Cc: corwin@bru.st <corwin@bru.st>; larsi@gnus.org <larsi@gn= us.org>; 55666@debbugs.gnu.org <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 


Hey, I just answered a question you asked, that's all.  I assumed that=
if you are asking it, it is important for you to know the answer.
--_000_DM5PR19MB4680F0BD8C740A3BF8C55077DBDB9DM5PR19MB4680namp_-- From debbugs-submit-bounces@debbugs.gnu.org Sat May 28 18:09:40 2022 Received: (at 55666) by debbugs.gnu.org; 28 May 2022 22:09:41 +0000 Received: from localhost ([127.0.0.1]:39018 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv4cu-0000kn-JP for submit@debbugs.gnu.org; Sat, 28 May 2022 18:09:40 -0400 Received: from mail-ej1-f48.google.com ([209.85.218.48]:33391) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv4cq-0000kZ-2b for 55666@debbugs.gnu.org; Sat, 28 May 2022 18:09:39 -0400 Received: by mail-ej1-f48.google.com with SMTP id f9so14688059ejc.0 for <55666@debbugs.gnu.org>; Sat, 28 May 2022 15:09:36 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=03ByE9n67Et4X/9+uSpuBhZ3hE9B8F22BfI23LutCno=; b=t2J+MPLTDZdZQ3bf8U1clSIbfFDiLV064dydHoL4yo6Mkr/fSO9OqsEEoInP41ii3q pXAOE8hP/R43Ed8jrW4nBcz8P2eb1gZXRPJlU4xwvCIifUT3Q5zSrc/VKA+7qqpqK8tn Ixd0ipf0+AszKtFhDHa5mQboFHrOL+eXkEx5FAowxK+cQgDf7yZqK8y7Zga9ZgwTS6PB RlB5ZFgHVqxEDKyAojmU2uwx33/C1xcbxppgLRAXgzOKByUkaHxMIAKduJnVXIeVlayb YOG/priItWmJfchKnapURwr5Z+DxUZDKIU+uu1N93n0q3W4xhiJ+acYbzef+1CneApLn TDiw== X-Gm-Message-State: AOAM533GjjCdNC0wKwUGJT2l4t+othHGPpyQZEXwdWBQGLx4xsVWP5ek nyump36N+OfMbIegUmvx2WK4b+Uw1yCxxydCIms= X-Google-Smtp-Source: ABdhPJwWMERwlHtQV9+i5p3Xe4S6mIxB0wGDykPzkCEiahwUDNTYHHAiDa1FdCImOa78JoQU50TGMgmdYN52/Xmaohw= X-Received: by 2002:a17:907:6d10:b0:6fe:c744:43be with SMTP id sa16-20020a1709076d1000b006fec74443bemr30981393ejc.470.1653775770250; Sat, 28 May 2022 15:09:30 -0700 (PDT) MIME-Version: 1.0 References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> <83k0a5lbob.fsf@gnu.org> <83ee0dlap5.fsf@gnu.org> In-Reply-To: From: Corwin Brust Date: Sat, 28 May 2022 17:09:21 -0500 Message-ID: Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads To: Ali Elshishini Content-Type: multipart/alternative; boundary="00000000000052f4ae05e019ade8" X-Spam-Score: 0.5 (/) X-Debbugs-Envelope-To: 55666 Cc: Eli Zaretskii , 55666@debbugs.gnu.org, Lars Ingebrigtsen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.5 (/) --00000000000052f4ae05e019ade8 Content-Type: text/plain; charset="UTF-8" Hastily top posting to say ACK and that I'll reply in again when I am at my computer and will share sha1 sums from my local copies then. On Sat, May 28, 2022, 15:31 Ali Elshishini wrote: > I apologize if it sounded like I am coming out too strong in any way > I really appreciate you taking the time to reply > > And I completely understand that neither you or Corwin, have any > obligation to fix this issue or enhance the situation > > Thanks > Ali > ------------------------------ > *From:* Eli Zaretskii > *Sent:* May 28, 2022 3:27 PM > *To:* Ali Elshishini > *Cc:* corwin@bru.st ; larsi@gnus.org ; > 55666@debbugs.gnu.org <55666@debbugs.gnu.org> > *Subject:* Re: bug#55666: enhancement request - SHA-256 for emacs > downloads > > > > Hey, I just answered a question you asked, that's all. I assumed that > if you are asking it, it is important for you to know the answer. > --00000000000052f4ae05e019ade8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hastily top posting to say ACK and that I'll reply in= again when I am at my computer and will share sha1 sums from my local copi= es then.

On Sat, May 28, 2022, 15:31 Ali Elshishini <shishini@outlook.com> wrote:
I apologize if it sounded like I am coming out too strong in any way
I really appreciate you taking the time to reply

And I completely understand that neither you or Corwin, have any obligation= to fix this issue or enhance the situation=C2=A0=C2=A0

Thanks
Ali=C2=A0
From:= Eli Zaretskii <eliz@gnu.org>
Sent: May 28, 2022 3:27 PM
To: Ali Elshishini <shishini@outlook.com>
Cc: corwin@bru.st <corwin@bru.st>; larsi@gnus.org <larsi@gnus.org= >; 55666@debbugs.gnu.org <55666@debbugs.gnu.org>=
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
=C2=A0


Hey, I just answered a question you asked, that's all.=C2=A0 I assumed = that
if you are asking it, it is important for you to know the answer.
--00000000000052f4ae05e019ade8-- From debbugs-submit-bounces@debbugs.gnu.org Sun May 29 03:42:23 2022 Received: (at 55666) by debbugs.gnu.org; 29 May 2022 07:42:23 +0000 Received: from localhost ([127.0.0.1]:39311 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvDZ9-0006mI-E6 for submit@debbugs.gnu.org; Sun, 29 May 2022 03:42:23 -0400 Received: from mail-ej1-f44.google.com ([209.85.218.44]:38618) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvDZ5-0006m4-RX for 55666@debbugs.gnu.org; Sun, 29 May 2022 03:42:22 -0400 Received: by mail-ej1-f44.google.com with SMTP id n10so15672430ejk.5 for <55666@debbugs.gnu.org>; Sun, 29 May 2022 00:42:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Q4hD0dDMZzX/0KBpqdTzvCXj3Hf6E3um9S57EHIzCps=; b=ppcCIfWWQGkUC57Lf9SBcEva5aEwAE8gJZfqYlSAFLM7Cw1KbFyXOrPJ2L8OBYom5Q MO9QvNTAOu9oLqtSE30xWgybWM2FGnwCJbe14IJED9cCgvQ37YYvURyHHBdaZZioIfZJ wxkFivlnyFPCVk9NzGktK1DmvYDMMRpYHyLN+9U+Q57Hlv1onhO463nr4nRwtXbavua0 W0jMiIsyEmzTvKs5+O03XnUOPrQ0RInThEegqFyiDzJLvmj0N8us+zkUy6/PzXhSQd2q OXobXzAE8mFuSwr8PWwoBPinck/GCBcAu2FGVex4gi6zNaxQuN1NHUOjQNwWmjynX7Cx FBtA== X-Gm-Message-State: AOAM531QZHST0d0Plw+s784wZ5wpF5DA99JfPT+C9ysneDs2o1+wz8JU AliPqCRWbXspSfYEWG/RgoO2AQ3btncrf4TJieo= X-Google-Smtp-Source: ABdhPJwjqnirygnPBg+F8x/tm9/krlDh4bWZzMyWBxB/tf4yZNqulE16bRjN+9j84gAUf3MGwgSDer7jOcH5KXeeKxk= X-Received: by 2002:a17:906:7949:b0:6ff:27a9:f024 with SMTP id l9-20020a170906794900b006ff27a9f024mr13030633ejo.277.1653810134042; Sun, 29 May 2022 00:42:14 -0700 (PDT) MIME-Version: 1.0 References: <875ylr8cmq.fsf@gnus.org> In-Reply-To: From: Corwin Brust Date: Sun, 29 May 2022 02:42:03 -0500 Message-ID: Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads To: Ali Elshishini Content-Type: text/plain; charset="UTF-8" X-Spam-Score: 0.5 (/) X-Debbugs-Envelope-To: 55666 Cc: Lars Ingebrigtsen , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.5 (/) On Fri, May 27, 2022 at 6:46 AM Ali Elshishini wrote: > > A checksum file (a file containing all checksums) can be included in the ftp folders > (each folder can have one checksums file for the files it contains) I think this is a great idea. If nobody objects, I'll start including something along these lines with my next upload of Windows binaries (or maybe sooner, backfilling something for 28.1). For the moment, you can get SHA1 sums for all (or at least, nearly all) the binaries I've created from here: https://corwin.bru.st/emacs-28/README (The parent folder --which has indexing enabled-- is where I've been staging my files before uploading to the GNU FTP servers and often includes other builds that I don't plan to upload.) If these don't work LMK and I'll regenerate the README file. I do have a script for that but it will take a little fooling around to make it worthly of including on the GNU FTP site (presuming others agree with me your idea of adding files with SHA1 information to the FTP folders is a good one). Thanks for the suggestion. BTW, you can also get my public key from Savannah by clicking "Download GPG Key" from my profile page, here: https://savannah.gnu.org/users/carlc From debbugs-submit-bounces@debbugs.gnu.org Sun May 29 13:08:59 2022 Received: (at 55666) by debbugs.gnu.org; 29 May 2022 17:08:59 +0000 Received: from localhost ([127.0.0.1]:41752 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvMPT-00016i-AQ for submit@debbugs.gnu.org; Sun, 29 May 2022 13:08:59 -0400 Received: from mail-bn7nam10olkn2063.outbound.protection.outlook.com ([40.92.40.63]:4801 helo=NAM10-BN7-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvMPN-00016Q-OU for 55666@debbugs.gnu.org; Sun, 29 May 2022 13:08:57 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=V8sQkpjx5lj6ccbLujTeE6jaR1LeBI30mO2ClYs1cwf5kg+vDSYF9A9yKqGmqxHdwSVz+jWNBJbexjeCP5ZfQw7a93bxf5GfuEgtywCpaiE3FdeulS0vGr6/WoTDtJ678Q+I33ZmD1ozOPncjkfN/9txHOt6A8v7D+FTfFkvJomN5RdSDKu5R7I3cNo3WnikgrPGJKM66GeqhjtFXZsZPALpYjwjJYndgPub/DLbT0W1HMy+h51YZxE93m8q2R8WELE7yS+VEp9FGmWgN51htx21ULraniMTCOc1K1p0pE3n0q89Grmza39n+T7+5RuJR9z+kmbErd2vi6ZbqxR1sw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Jjfuuy4w3KbzFXylOPv8bajgFP/kKG22YjBjptMslmg=; b=Rk/6+lAHFRokQ7Zsov6O9sr3h4SeIfZwlfanxhFL/fNhQ9E5MOzKsudHSsIrlpgMOH6xSg1UTJfS8V3Mfy2CDDPDZfbqpDylcTTivEAMdNrCbK/WD3D2YBHaMjoJPo0yd2t0mciY2egViAKzaFoaHt8uBf6OybNELqMjicSn9kNC7u+CwLq7PrElydczhfdSvi8DUrnrIIkBEOpDPpbTuiLLOWIC2zdbbJ5Ag1WNo8FGFLjXAi5QK6Z5fZgGnTlQpNveIaW+82wcK4EhbVMAMR8cQJfjafTaPi0E63rPCR1DYqFiDg9QyK46lRhUjn+dsTkiaGQJDYZhTUhTqkZ4PA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Jjfuuy4w3KbzFXylOPv8bajgFP/kKG22YjBjptMslmg=; b=F+M2U6r6E3GVtmy0Dd09ZaWveblHlEaRm/9NQ4/UpXVQhMhYnc9Fai2cQGfKK6/eDaQRvEZn4vC4E6XRvT/+b5lUQg86H2sl26oez1OW9t2TwqueEhg6m29nnKj1ohfsI8ffJtGmm2DJUOQUa9VWIzc76wHPgHpuXR4y+GoEExAzMUSmjAD/tCxZFNaBkyOubiYM/d35KB0P8Jzd0tV27H66B2PrCGTqMUZmysQr/0dtt4EbEJvvt4uToXBj1rvGnHaxU0B4tq9lE2RhfcWtigQvHTVf+VnWHaHtuBH+x/V2q24uICnOhOKFtkOix09siOBaZCZXuEmb0/WiM1EPRQ== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by PH7PR19MB5582.namprd19.prod.outlook.com (2603:10b6:510:135::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.16; Sun, 29 May 2022 17:08:46 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::edd5:e27f:fe9:9ebd]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::edd5:e27f:fe9:9ebd%7]) with mapi id 15.20.5293.019; Sun, 29 May 2022 17:08:46 +0000 From: Ali Elshishini To: Corwin Brust Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAKTauAAuMugIAAnYnk Date: Sun, 29 May 2022 17:08:46 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> In-Reply-To: Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: 21345ea1-5240-6132-c99c-fd1b55f5fd73 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [8x5QO2/BBFC70y5/g9ouMRuryGegC5o16rx/TpIFsUE=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b10e839f-4b74-4158-a34d-08da4195e444 x-ms-traffictypediagnostic: PH7PR19MB5582:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?XZ0CkbF0a9npYeKgaFOxzdwjuXnnn0D1vGkaw6xML7XRA0YLva2lu2EnP8Vz?= =?us-ascii?Q?KzEmYk6nZC9yv8HRs6uH5c/fH2vJXPBOFShFmltjQq7FX6JsOHRHTGbOqkKh?= =?us-ascii?Q?1W8JPZESVavv/kb1VSlPnY0Epll2nQXtu7sF4bX6qfSJb1yEnEuDdvBheCua?= =?us-ascii?Q?bonW2gVYxSZvobd20NUOerdJT4dhos828mpNfP8Bv6R5PCV06SiaBskQeIvP?= =?us-ascii?Q?/zySEQBydTF+PNf40Ntvu1DumT7h3dTTUJI9agZwPeSym+txBjqCJZxiygcF?= =?us-ascii?Q?/hg7/YSx0fhABFIEKSOEonh0s7RtAD2qDjazLM6tf2M5FMk6L5XHlL14k2Z3?= =?us-ascii?Q?H/2xS1bAgALwypDUACVnMhdYfJ0seSRNEFzawKGkblnF4GtU7yKDldLch5ts?= =?us-ascii?Q?n6nHT1eK84P6/Yo4U10pYhOf0T7ZCF8K+JMmbjU+vSiDjgaVbnduNuUVRQSY?= =?us-ascii?Q?lvsaB7ZsChKaNyuHiZG1ARSx18x15UIwKLqJGhYtHbz9Knsfp0/QKfYEesTF?= =?us-ascii?Q?idgpbcoSAX79fy9s4FdkJ/LpdfmzxuValpSMKus0hlyxL+39gshlHUFIQDdX?= =?us-ascii?Q?oQhDfpM7Dcmj9HFjETHoeD8PjbMxcSQFIN3TjD9xw1TLgYr+sgyHoSuav9SQ?= =?us-ascii?Q?mkPw+9eNNy++vwsqQ+HX+QLA2nDJaUuX3USL09bFAObrNSNHN7e74rjT8Eku?= =?us-ascii?Q?aRy8B2hyVYAHhGj7GD03JNsQyHInpRM00LSy54SPXR3wW1PHz2ivQKNc0A3i?= =?us-ascii?Q?fq8E/AmdrAThkEhFlfE2rmAZYgJQfkwjPVk+FaseoGV1/D8QU8t91bxd3wu0?= =?us-ascii?Q?Dh29Ph4Ik49dcZgwfgOn/WG4ug8vNyiP5SrTZFKBRCEvItyqIgDTQUZNiueU?= =?us-ascii?Q?U/YosRyrCqmQh4R92udZh3JBCL8W/CZWb2PTNKRl7t9I5s/TsJ8KXiGxzP8l?= =?us-ascii?Q?QrC/S9EUPNqQmamWC82fdwGrooRBw1kljppyPHAUc9AMrCdrb2v2DyPLM1No?= =?us-ascii?Q?CPudfQg2Ai/qv4OsX2/BpFkgdSc8e7dK99LQopcByDxbFcOnLYTdsjsL1P3c?= =?us-ascii?Q?adJdUQbRI6xy3uRz/QGo+EfUJ7CMtndUxk9vFr8BsYqYiq/9k0lEYP09TMD1?= =?us-ascii?Q?vTNcKHgh7ctdSoZTt0txvhsX3ZxiIAB/HzUah9E8i6hOYUe/IHl9MMXUaRgb?= =?us-ascii?Q?XjDMnu51fuEfF/m1d+GN8TwGV0HDaYq1p22TR9wHJ8g8SdP2NqSqycHOnfnS?= =?us-ascii?Q?HEdaC6W6Me/IHrPF0O08bU3SXy8aIxx7y9wfAXwESiqizl/pl6MPNetcQ8YE?= =?us-ascii?Q?hVqqA5Cx4aQshHh9H2UAT3Mat1g2AlbQLdYygxNtRky8Nn8H3u5cP52i7mDI?= =?us-ascii?Q?qUZIKoLS6ctwvJOw15vbXXvvqnk+OoHjHw9OVqPf834qGZx/qBEA7SjmFj3k?= =?us-ascii?Q?ZRtCyzNh0jw=3D?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: b10e839f-4b74-4158-a34d-08da4195e444 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 May 2022 17:08:46.1826 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR19MB5582 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55666 Cc: Lars Ingebrigtsen , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable First sorry for top posting, I am using hotmail/outlook, and dont know how = to setup bottom posting Also honestly, I never really knew about this convention of bottom posting Second, that a lot Corwin, adding the SHA hashes will be great Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolete and= broken https://en.wikipedia.org/wiki/SHA-1 So I think SHA-256 should be enough, and if you want to can consider SHA-51= 2 Most project I see use SHA-256, and only very few offer or use SHA-512 Thanks Ali ________________________________ From: Corwin Brust Sent: May 29, 2022 3:42 AM To: Ali Elshishini Cc: Lars Ingebrigtsen ; 55666@debbugs.gnu.org <55666@debbug= s.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads On Fri, May 27, 2022 at 6:46 AM Ali Elshishini wrote= : > > A checksum file (a file containing all checksums) can be included in the = ftp folders > (each folder can have one checksums file for the files it contains) I think this is a great idea. If nobody objects, I'll start including something along these lines with my next upload of Windows binaries (or maybe sooner, backfilling something for 28.1). For the moment, you can get SHA1 sums for all (or at least, nearly all) the binaries I've created from here: https://corwin.bru.st/emacs-28/README (The parent folder --which has indexing enabled-- is where I've been staging my files before uploading to the GNU FTP servers and often includes other builds that I don't plan to upload.) If these don't work LMK and I'll regenerate the README file. I do have a script for that but it will take a little fooling around to make it worthly of including on the GNU FTP site (presuming others agree with me your idea of adding files with SHA1 information to the FTP folders is a good one). Thanks for the suggestion. BTW, you can also get my public key from Savannah by clicking "Download GPG Key" from my profile page, here: https://savannah.gnu.org/users/carlc --_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
First sorry for top posting, I am using hotmail/outlook, and dont know h= ow to setup bottom posting
Also honestly, I never really knew about this convention of bottom posti= ng 

Second, that a lot Corwin, adding the SHA hashes will be great 

Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolete = and broken https://en.wikipedia.org/wiki/SHA-1
So I think SHA-256 should be enough, and if you want to can consider SHA-51= 2 

Most project I see use SHA-256, and only very few offer or use SHA-512

Thanks
Ali 
From: Corwin Brust <corw= in@bru.st>
Sent: May 29, 2022 3:42 AM
To: Ali Elshishini <shishini@outlook.com>
Cc: Lars Ingebrigtsen <larsi@gnus.org>; 55666@debbugs.gnu.org = <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
On Fri, May 27, 2022 at 6:46 AM Ali Elshishini <= ;shishini@outlook.com> wrote:
>
> A checksum file (a file containing all checksums) can be included in t= he ftp folders
> (each folder can have one checksums file for the files it contains)
I think this is a great idea.  If nobody objects, I'll start including=
something along these lines with my next upload of Windows binaries
(or maybe sooner, backfilling something for 28.1).

For the moment, you can get SHA1 sums for all (or at least, nearly
all) the binaries I've created from here:

https://corwin.bru.st/ema= cs-28/README

(The parent folder --which has indexing enabled-- is where I've been
staging my files before uploading to the GNU FTP servers and often
includes other builds that I don't plan to upload.)

If these don't work LMK and I'll regenerate the README file.  I do
have a script for that but it will take a little fooling around to
make it worthly of including on the GNU FTP site (presuming others
agree with me your idea of adding files with SHA1 information to the
FTP folders is a good one).

Thanks for the suggestion.

BTW, you can also get my public key from Savannah by clicking "Downloa= d GPG
Key" from my profile page, here:

  https://savannah.gn= u.org/users/carlc
--_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_-- From debbugs-submit-bounces@debbugs.gnu.org Sun May 29 14:53:57 2022 Received: (at 55666) by debbugs.gnu.org; 29 May 2022 18:53:57 +0000 Received: from localhost ([127.0.0.1]:41951 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvO32-0003tE-PV for submit@debbugs.gnu.org; Sun, 29 May 2022 14:53:57 -0400 Received: from mail-ed1-f41.google.com ([209.85.208.41]:33692) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvO2x-0003sz-Ch for 55666@debbugs.gnu.org; Sun, 29 May 2022 14:53:55 -0400 Received: by mail-ed1-f41.google.com with SMTP id h19so2945425edj.0 for <55666@debbugs.gnu.org>; Sun, 29 May 2022 11:53:51 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=25omfUDA+uWv8SURWJMbkdtNMmnZmMp+1WkM4xsLVps=; b=Ydjk3n9vFPngHfZZ6yGSP9vg8Vyx8y8Pz3RaJKv5KycWI3Pcva5TGtBnBLM5pTjJfP a5BuI2asMN4PZ/QnBYcEYuqlWwkxbPhhhxjEeZHza+dOHK8/vy6zTT9ks8CSbyqIVEpy rlyeFdBegar6dse0sY89xgOoD7hUExpuvp31NVWa+K/6EujwO3x3LKcHvdFfbe0pQyVN TBVVwmEn/xs+hnT6NA1GUO0177tZQTbwUwRmpa9xL4+DGsJJYICaAk5bd8YhiEPoy/wj 2YVRHgmkrZnXXn2XwZStBZED2O37ZjT5M23j2KS4BM2JumDZxRu88A52Uor+7DSD/rFY Fv2Q== X-Gm-Message-State: AOAM533Ya0LJsZQYr9PFpWTlhqZOt5kECSFRPgOXjFkuutvswmNmhYAM rf8NQldjZj/cbIhhYsciw4406QkhDICO5NFI3nA= X-Google-Smtp-Source: ABdhPJzP44rSd5bnuLwq06CCThjxp4vmsAS83d0oGdv53x88V28/i/Vm4nc7zImaQj4hbadHzQN+dtROK5u2rPYTyZw= X-Received: by 2002:a05:6402:35d1:b0:42b:514a:14f1 with SMTP id z17-20020a05640235d100b0042b514a14f1mr40967712edc.355.1653850425413; Sun, 29 May 2022 11:53:45 -0700 (PDT) MIME-Version: 1.0 References: <875ylr8cmq.fsf@gnus.org> In-Reply-To: From: Corwin Brust Date: Sun, 29 May 2022 13:53:35 -0500 Message-ID: Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads To: Ali Elshishini Content-Type: text/plain; charset="UTF-8" X-Spam-Score: 0.5 (/) X-Debbugs-Envelope-To: 55666 Cc: Lars Ingebrigtsen , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.5 (/) On Sun, May 29, 2022 at 12:08 PM Ali Elshishini wrote: > > First sorry for top posting, I am using hotmail/outlook, and dont know how to setup bottom posting > Also honestly, I never really knew about this convention of bottom posting It's not a problem for me; more of a "netiquette" WRT to mailing lists, in general. > Second, that a lot Corwin, adding the SHA hashes will be great Let see if others voice opinions; if not I'm happy to start doing that. > Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolete and broken https://en.wikipedia.org/wiki/SHA-1 > So I think SHA-256 should be enough, and if you want to can consider SHA-512 I'm not convinced of any practical benefit to SHA256 (or 512) WRT verification of data integrity (although I do understand SHA1 isn't recommended for encryption/cryptographic use-cases. That said, here are SHA256 sums for the present binaries for Emacs 28.1: c31fc9e1b48eeb3a50dcc161e4749b304d25e23bf33c287b50bfe9e3f4742577 *emacs-28.1-installer.exe da25ef9e067d630995c43faf460f991c4d5b2020a0fc02c7a7955069bf977508 *emacs-28.1-no-deps.zip 9006f875255056af0bb318298537f66353806b64eee0c3a593c5862328e685fc *emacs-28.1.zip 9c8c6066a4a1a4f68b44a0158af255ebe8671a5bcd6fb5e9db7fea26b6a3d4eb *emacs-28.1-DEBUG-installer.exe 659b8281c301ea1c2e03b6bf935f1e488ed4f4d787cb4e7c23fce494193b6525 *emacs-28.1-DEBUG-no-deps.zip 3962e056ef58b32ad9b175a7e2ea3ed6e18c397f4825bb9756bef6e5606b930e *emacs-28.1-DEBUG.zip 8f963ced4d88c4ed802676f59f2417b660cf8c494bd9bf9fe19bb4ca1be2a940 *emacs-28-deps-mingw-w64-src.zip ba7e56f76a1d550add33dc4d28bb8e1dcd6d5882cb2be03b30441491873c01d5 *emacs-28-deps.zip Please do let me know if signatures appear to be a mismatch with what you have downloaded. From debbugs-submit-bounces@debbugs.gnu.org Sun May 29 15:47:07 2022 Received: (at 55666) by debbugs.gnu.org; 29 May 2022 19:47:07 +0000 Received: from localhost ([127.0.0.1]:41993 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvOsS-0005mu-Ub for submit@debbugs.gnu.org; Sun, 29 May 2022 15:47:06 -0400 Received: from mail-bn8nam12olkn2093.outbound.protection.outlook.com ([40.92.21.93]:44896 helo=NAM12-BN8-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvOsN-0005mH-BG for 55666@debbugs.gnu.org; Sun, 29 May 2022 15:47:03 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hhRD1X82QzN2JkxhzJcWOLUDJq43bn4A2jkcnXSvXHmdjAYg7x7sfgdhsJj1FVbwQbvyxpUfmFUjLcOIdRrKofJb/kq0sDI1L00Mi9BXYD1EjRVfAxHs2v/yiaHM6G+uGhIZLproDn2QJhz/Od2Ywpk0KNhObhhjNrNnrLg9W26WE4Eo2TtsSbIZxY2hFvudE3Juvcf4C3A+TTFXHp3/LRkeFC7HJl6q5YI+ib5zG0vj2Wt5Ht78ghSqqrGlEEvME3Gt9QgTuTjMyVxOxn6e0nUq0SWDb1/sKlRVxQQ/gjAMtZz6q5BT32yii10tMXL/Q4L1Zl2eEIfkL8AgNVkYOA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=lW9BbLUVaBchi6DgUyVCci5ifID5sT5ITwJjE+/mbl0=; b=VV460d5DAGm6njvIyWExi86csikI3+GxWr39kuSVUyZMvGbSSgpDS4kdAqrUORzxa+RqWXfQZC87sv2MPuUkDV9PaUF7Z4R3uZthLvE06MyMHW52+FHfrTnDxCXuaT+oxabyZ0e3SeR/XLT5ydA+5H5o6HdKQvWoQKHuJ0jX3+V+M9rDJefhWBrCNOCArJtNDCmRvvRCUiZbXsrO/DFJatDfQxUGGqoEasFKaIfA4QNgbg7Q59TBUz0t01F8oo40WNmmci8wwyv2lb3a531uKt5TbJZmJpoLgaWJEg36hRRsU1JK12pfoqwLirefLyHBts37nCAtcmQdO8yKawfhCQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lW9BbLUVaBchi6DgUyVCci5ifID5sT5ITwJjE+/mbl0=; b=AOfW0dNVFqfX42b1rmFcjg+IeL51p1TCBNn/8bOV9xpmBbkbkzxY182Ck+Y070tD56PIFSV/0xuMc5pojCcfwLuoFVpgIwFJjgxyIiADW65UpGmx4HYIUZgPiwJXPIvUm1DJ8vy7g2HPS1y/1IktwWzT/Hx6HYdG4g1LJUZ8RuBe5XlokdBGiRyaTzpRSA5NbQjPASK4fISjF2nGaSZ1Cgxuii9E0F6X9QIyaNOHpzNWgFD7gac4WxYPV+l5mmP5QIspr7wvfLwd0lMBvqKyUwnnt/MN+OvPLN3X0CTfn1Kq3wSFP5weOasyIITciOW+DmjlcYC31Tmwl+O3mVjSQA== Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by CO1PR19MB5222.namprd19.prod.outlook.com (2603:10b6:303:d8::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.18; Sun, 29 May 2022 19:46:52 +0000 Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::edd5:e27f:fe9:9ebd]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::edd5:e27f:fe9:9ebd%7]) with mapi id 15.20.5293.019; Sun, 29 May 2022 19:46:52 +0000 From: Ali Elshishini To: Corwin Brust Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAKTauAAuMugIAAnYnkgAAeFoCAAA5uPg== Date: Sun, 29 May 2022 19:46:52 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> In-Reply-To: Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: ef6cbaf3-780f-0616-f794-8841236efcdf x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [nq7UT4QUb4x3Ns1AptEMij4aWzgxcmMC] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 038e33ea-b71d-4c9d-55f6-08da41abfa51 x-ms-traffictypediagnostic: CO1PR19MB5222:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: iIptWfiE/ebO8FRLmpwddvfcgeT/cy0k0IqtfOvZ6vGYk5vO7G2i0QAkQEbsFXXX698XGU424snYn3NuzJpOk+lcTUz3A/4fPnYqqTYpDvhx8zLf3anXZl6IWD150g5OkSKHv9YbM94BeP1uyKi73UyI0ibbPNRTkfMUkQWKxCxWcEjwnhs7cr7a3p5CLj5kUjXq7xbCya5J/0zuK4lI3OiJ+jw69m4s4t1FJh5C18fd8xVefeVq6mHaGZ+uGJxvQUkjltgVjqX9CPXwsYpT9J4KQOmkzUnB0ircnVPB+Ue53H7Q6yCaiWfa7K2LmS0SZx3qj5eCD86deRYKiHJKKq+Q4+myDfCj0W3kcaFCnCy+Oct0IVexIUhrPx1OCpMmtXIfIqGT98GwvGBxXTHMfEww4PbQSrWA46viQZRyh3i3GcqTX0/uUcZB4Ual+mCtPrlHvXXu50/3GtdXvllmLrtbhoehwTOpSD+KxXRKsEYEFnMBVjcImi1s2GhVlcYy05uvpeDKjGKO0bo46FqVTiaGB7dQPVW9bOeG8fO1enSKiUJOFUvdKq4u4IJr6r09qFAlAqFzxX18ZKh6gERU1n8IAt4Meb9LugSMQKa1XSDSm+/v1W5rlWtzJhcikkFr x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?oZ6ebBzvBmIVWUBGzuFwvmYx8i2iGnxz7uQnigzjqQFKp1/mgwPiyban2k?= =?iso-8859-1?Q?zqe7yOOzZX4puUhVszq41J6GIsC7rwd8ghHDakMul3nzFJmX9RXnqEuRmb?= =?iso-8859-1?Q?jd2oNp6dMgBDRaKyRELwTx7CnpDFxfGanU+cXfomUsfplRXCUgUl/hRb3G?= =?iso-8859-1?Q?6eV8pSrNkGTpTMKBIwE0WobrGt/g4xsdrW4HAJ5n+36PV8glap21d+SD7N?= =?iso-8859-1?Q?iu3hWnOO6dydkHE43Gi6J0+fCGorly9HlK76yonu3c5uY+VSuT7Gv40bO/?= =?iso-8859-1?Q?NBN0Vmg5cNl+WoyWurSetBGY00vbP7zg18xUk6eBc95OAEn3t/3TCY1C9O?= =?iso-8859-1?Q?bUgtj3W6bNz3y/2OzA8zsyUc8IN9ToougO3LBGaNEflGT2UPgH/TQrN2+A?= =?iso-8859-1?Q?Rp/f0XymP0oVhe7xcNZ9MUJL8U49nIEjozscyrHyYICE0vwEJnb5VIaNgL?= =?iso-8859-1?Q?ifVeoghNU+Nd0obCJ+ZZ3g5iK2bBrZsdSqIxVgExGAutmJArAX/8s/nb06?= =?iso-8859-1?Q?s0ct2iT4MxScYniN3rdSxjWwn+ZOXzNYmVHdBI9GCTElYX3r7x0BP7MlRY?= =?iso-8859-1?Q?vTCGlgICz8swyXtq8JX/nL31b5kt737/FKlcAMjBqpm8Vmgxgnsf/cz+3I?= =?iso-8859-1?Q?zL1d2uNEQOk5rFLV2bObOBCP/X1t9JbSss4gDIjmZpQtXyOUA/opgdRwFg?= =?iso-8859-1?Q?1BCsS05iTBg6THtvmvIJScspRrDv0HnInPiHxwU83NbV+k9xen+jKBYVw5?= =?iso-8859-1?Q?rp+5aapp5JH9gIuWNhJV9rdEOjhjNtgf9OjrU5b6LYW2O42emls7+SOWwg?= =?iso-8859-1?Q?D1CNifG4RVsh6yXe+prK0QdfvaTv6g6klbFKgeXHfYuaYNuH1eLwY40smy?= =?iso-8859-1?Q?5U+ZHDllF02W2wcA52PVSqqSEbwVm+DgVSfyjvi3Bhh7NBm5eBbz2CCZDj?= =?iso-8859-1?Q?IGkfuUiTmxexS88Nj86W/GPbHBU0L0usOeIqhY9GIpBamzWMsBhZJTBv3J?= =?iso-8859-1?Q?qE1kcmH3wPDfpxEy+w68iCWwjoXhjgxQsjmvNnMGG9p5u/7HiY/EARBI+i?= =?iso-8859-1?Q?ZDRm0J6HGkk4n6e7Vowt9FLc3PhuJT8kBGZOrB5paesQs0hcej9psxMNqX?= =?iso-8859-1?Q?OdbhqEwd5aM1AozJsoFx6aGHHJxifTeegn8xb6G6PcSO1h/CZgKrZwPOH8?= =?iso-8859-1?Q?Cm4HsdzQGbJ9m9MD6lBeXY0CLAfoahN80ARARBhkiVE+dtNJ5DV/Qg1MD5?= =?iso-8859-1?Q?WKInFNVHC0fBri4YTDJbATlU6VbeODKLe9R2y+nW2WAhjj1hWkabsy9Njg?= =?iso-8859-1?Q?FIZ84n+mKLemW+DwC/tanptUQmPey4/qsVaD0+MLBXkpOIK2B6V20fc6Z8?= =?iso-8859-1?Q?Mg6RDjIRhHhh+68NkZvcGsjmIKoFk1Qe5DWO10SpnUtzZEN0Wx2Us+1Hwe?= =?iso-8859-1?Q?W4fuGI3++kemmWcdqz7v19IoFHE/1GyAMgjD1i6WzXjEaXLsWtCwL+LN38?= =?iso-8859-1?Q?g=3D?= Content-Type: multipart/alternative; boundary="_000_DM5PR19MB4680026EA664866DDC6AC0F8DBDA9DM5PR19MB4680namp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 038e33ea-b71d-4c9d-55f6-08da41abfa51 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 May 2022 19:46:52.1037 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR19MB5222 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55666 Cc: Lars Ingebrigtsen , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --_000_DM5PR19MB4680026EA664866DDC6AC0F8DBDA9DM5PR19MB4680namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable the hash dont match PS C:\downloads> Get-FileHash -Algorithm SHA256 .\emacs-28.1.zip | select -= ExpandProperty hash | % tolower 0ef568df955fec4721634336585968fe593f3b008fce936a464fb524e5a3f009 Your hash is 9006f875255056af0bb318298537f66353806b64eee0c3a593c5862328e685fc *emacs-28.= 1.zip I redownloaded the file from https://ftp.gnu.org/gnu/emacs/windows/emacs-28= / just to be sure Thanks Ali ________________________________ From: Corwin Brust Sent: May 29, 2022 2:53 PM To: Ali Elshishini Cc: Lars Ingebrigtsen ; 55666@debbugs.gnu.org <55666@debbug= s.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads On Sun, May 29, 2022 at 12:08 PM Ali Elshishini wrot= e: > > First sorry for top posting, I am using hotmail/outlook, and dont know ho= w to setup bottom posting > Also honestly, I never really knew about this convention of bottom postin= g It's not a problem for me; more of a "netiquette" WRT to mailing lists, in general. > Second, that a lot Corwin, adding the SHA hashes will be great Let see if others voice opinions; if not I'm happy to start doing that. > Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolete a= nd broken https://en.wikipedia.org/wiki/SHA-1 > So I think SHA-256 should be enough, and if you want to can consider SHA-= 512 I'm not convinced of any practical benefit to SHA256 (or 512) WRT verification of data integrity (although I do understand SHA1 isn't recommended for encryption/cryptographic use-cases. That said, here are SHA256 sums for the present binaries for Emacs 28.1: c31fc9e1b48eeb3a50dcc161e4749b304d25e23bf33c287b50bfe9e3f4742577 *emacs-28.1-installer.exe da25ef9e067d630995c43faf460f991c4d5b2020a0fc02c7a7955069bf977508 *emacs-28.1-no-deps.zip 9006f875255056af0bb318298537f66353806b64eee0c3a593c5862328e685fc *emacs-28.= 1.zip 9c8c6066a4a1a4f68b44a0158af255ebe8671a5bcd6fb5e9db7fea26b6a3d4eb *emacs-28.1-DEBUG-installer.exe 659b8281c301ea1c2e03b6bf935f1e488ed4f4d787cb4e7c23fce494193b6525 *emacs-28.1-DEBUG-no-deps.zip 3962e056ef58b32ad9b175a7e2ea3ed6e18c397f4825bb9756bef6e5606b930e *emacs-28.1-DEBUG.zip 8f963ced4d88c4ed802676f59f2417b660cf8c494bd9bf9fe19bb4ca1be2a940 *emacs-28-deps-mingw-w64-src.zip ba7e56f76a1d550add33dc4d28bb8e1dcd6d5882cb2be03b30441491873c01d5 *emacs-28-deps.zip Please do let me know if signatures appear to be a mismatch with what you have downloaded. --_000_DM5PR19MB4680026EA664866DDC6AC0F8DBDA9DM5PR19MB4680namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
the hash dont match 

PS C:\downloads> Get-FileHash -Algorithm SHA256 .\emacs-28.1.zip | se= lect -ExpandProperty hash | % tolower
0ef568df955fec4721634336585968fe593f3b008fce936a464fb524e5a3f009<= br style=3D"background-color:rgb(255, 255, 255)">
Your hash is 
9006f875255056a= f0bb318298537f66353806b64eee0c3a593c5862328e685fc *emacs-28.1.zip

I redownloaded the file from https://ftp.gnu.org/gnu/emacs/windows= /emacs-28/
just to be sure 

Thanks
Ali

From: Corwin Brust <corw= in@bru.st>
Sent: May 29, 2022 2:53 PM
To: Ali Elshishini <shishini@outlook.com>
Cc: Lars Ingebrigtsen <larsi@gnus.org>; 55666@debbugs.gnu.org = <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
On Sun, May 29, 2022 at 12:08 PM Al= i Elshishini <shishini@outlook.com> wrote:
>
> First sorry for top posting, I am using hotmail/outlook, and dont know= how to setup bottom posting
> Also honestly, I never really knew about this convention of bottom pos= ting

It's not a problem for me; more of a "netiquette" WRT to mailing<= br> lists, in general.

> Second, that a lot Corwin, adding the SHA hashes will be great

Let see if others voice opinions; if not I'm happy to start doing that.

> Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolet= e and broken https://en.wikipedia.org/wiki/SHA-1
> So I think SHA-256 should be enough, and if you want to can consider S= HA-512

I'm not convinced of any practical benefit to SHA256 (or 512) WRT
verification of data integrity (although I do understand SHA1 isn't
recommended for encryption/cryptographic use-cases.

That said, here are SHA256 sums for the present binaries for Emacs 28.1:
c31fc9e1b48eeb3a50dcc161e4749b304d25e23bf33c287b50bfe9e3f4742577
*emacs-28.1-installer.exe
da25ef9e067d630995c43faf460f991c4d5b2020a0fc02c7a7955069bf977508
*emacs-28.1-no-deps.zip
9006f875255056af0bb318298537f66353806b64eee0c3a593c5862328e685fc *emacs-28.= 1.zip
9c8c6066a4a1a4f68b44a0158af255ebe8671a5bcd6fb5e9db7fea26b6a3d4eb
*emacs-28.1-DEBUG-installer.exe
659b8281c301ea1c2e03b6bf935f1e488ed4f4d787cb4e7c23fce494193b6525
*emacs-28.1-DEBUG-no-deps.zip
3962e056ef58b32ad9b175a7e2ea3ed6e18c397f4825bb9756bef6e5606b930e
*emacs-28.1-DEBUG.zip
8f963ced4d88c4ed802676f59f2417b660cf8c494bd9bf9fe19bb4ca1be2a940
*emacs-28-deps-mingw-w64-src.zip
ba7e56f76a1d550add33dc4d28bb8e1dcd6d5882cb2be03b30441491873c01d5
*emacs-28-deps.zip

Please do let me know if signatures appear to be a mismatch with what
you have downloaded.
--_000_DM5PR19MB4680026EA664866DDC6AC0F8DBDA9DM5PR19MB4680namp_-- From unknown Sat Jun 21 03:22:20 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 27 Jun 2022 11:24:09 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator