[Live-devel] source availability over an encrypted connection

[Kyle Sebion]

Hello,
Apologies if I'm speaking out of turn.
The sha1/a hash wouldn't be enough because MITM could also change that.
The typical solution I see for something like this is a signature.
Like
http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA256SUMS.sign
for
http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA256SUMS
.

Another solution is to multiplex ssh and https on 443 like
https://superuser.com/a/1343424.
That can become a bit complicated, though.


If you have any additional problems or questions, or if we got the priority
wrong and it needs to be handled more urgently, please see below for
contact information.

Thank you.



Kyle Sebion, Digital Forces Corp.


Support: *help at digitalforces.com <help at digitalforces.com> *(*faster and
better than my personal email or phone number*; reaches multiple people
7:00 AM to 5:00 PM, M-F, Central Time)
Urgent support: 630-978-2000 X 1 (*if possible, email help first and then
call to make sure it's handled quickly*)
Direct/text: 630-299-4971


On Mon, Jan 12, 2026 at 2:23 PM Ross Finlayson <finlayson at live555.com>
wrote:

> Dominik,
>
> This will happen at some point, but is being held up by technical issues
> (on our web server, we currently run a sshd server on port 443, as a way to
> allow ssh login across some firewalls that block ports other than 80 and
> 443).  This is not a high priority, though, as none of the data provided by
> our web server is confidential.
>
> Note that if you are concerned about the integrity of our source file
> tarball, we also provide a SHA1 fingerprint ("live555-latest-sha1.txt”)
> which you can use to compare against running “sha1” on the “.tar.gz” file.
>
>
> Ross Finlayson
> Live Networks, Inc.
> http://www.live555.com/
>
>
> _______________________________________________
> live-devel mailing list
> live-devel at lists.live555.com
> http://lists.live555.com/mailman/listinfo/live-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20260112/a33711f9/attachment.htm>