Changeset 8307474 for introduction/important/building-notes.xml

Timestamp:

12/04/2021 03:28:15 PM (2 years ago)

Author:

Thomas Trepl (Moody) <thomas@…>

Branches:

lazarus

Children:

e6974d1

Parents:

b22e4ceb (diff), edd2feb7 (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Merge branch 'trunk' into lazarus

File:

• introduction/important/building-notes.xml (modified) (1 diff)

introduction/important/building-notes.xml

@@ -113 +113 @@
 
     <para>MD5 is not cryptographically secure, so the md5sums are only
-    provided for detecting random errors or truncations introduced during
-    network transfer.  There is no <quote>100%</quote> secure way to make
+    provided for detecting unmalicious changes to the file content.  For
+    example, an error or truncation introduced during network transfer, or
+    a <quote>stealth</quote> update to the package from the upstream
+    (updating the content of a released tarball instead of making a new
+    release properly).</para>
+
+    <para>There is no <quote>100%</quote> secure way to make
     sure the genuity of the source files.  Assuming the upstream is managing
     their website correctly (the private key is not leaked and the domain is