<div dir="ltr"><div>Hello,<br>Apologies if I'm speaking out of turn.<br>The sha1/a hash wouldn't be enough because MITM could also change that.<br>The typical solution I see for something like this is a signature.<br>Like <a href="http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA256SUMS.sign">http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA256SUMS.sign</a> for <a href="http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA256SUMS">http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA256SUMS</a>.<br><br>Another solution is to multiplex ssh and https on 443 like <a href="https://superuser.com/a/1343424">https://superuser.com/a/1343424</a>.<br>That can become a bit complicated, though.</div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div style="color:rgb(0,0,0);font-size:12px;font-family:arial,verdana,tahoma"><span style="background-color:transparent;font-family:arial,sans-serif;font-size:11pt;font-weight:700"><br></span></div><div style="color:rgb(0,0,0);font-size:12px;font-family:arial,verdana,tahoma"><span style="background-color:transparent;font-family:arial,sans-serif;font-size:11pt;font-weight:700"><br></span></div><div style="color:rgb(0,0,0);font-size:12px;font-family:arial,verdana,tahoma"><span style="background-color:transparent;font-family:arial,sans-serif;font-size:11pt;font-weight:700">If you have any additional problems or questions, or if we got the priority wrong and it needs to be handled more urgently, please see below for contact information.</span></div><span style="color:rgb(0,0,0);font-size:12px;font-family:arial,verdana,tahoma"><br><p dir="ltr" style="margin:0pt;font-family:Arial,Verdana,Tahoma;line-height:1.38"><span style="font-size:11pt;font-family:arial,sans-serif;background-color:transparent;vertical-align:baseline">Thank you.</span></p><p dir="ltr" style="margin:0pt;font-family:Arial,Verdana,Tahoma;line-height:1.38"><span style="font-size:11pt;font-family:arial,sans-serif;background-color:transparent;vertical-align:baseline"> </span></p><p dir="ltr" style="margin:0pt;font-family:Arial,Verdana,Tahoma;line-height:1.38"><span style="font-size:11pt;font-family:arial,sans-serif;background-color:transparent;vertical-align:baseline">Kyle Sebion, Digital Forces Corp.</span></p><p dir="ltr" style="margin:0pt;font-family:Arial,Verdana,Tahoma;line-height:1.38"><span style="font-size:11pt;font-family:arial,sans-serif;background-color:transparent;vertical-align:baseline"><br></span></p><p dir="ltr" style="margin:0pt;font-family:Arial,Verdana,Tahoma;line-height:1.38"><span style="font-size:11pt;font-family:arial,sans-serif;background-color:transparent;vertical-align:baseline"><span style="font-family:Arial,Helvetica,sans-serif;font-size:small;color:rgb(32,33,36)">Support:</span><span style="font-family:Arial,Helvetica,sans-serif;font-size:small;color:rgb(32,33,36)"> </span><b style="font-family:Arial,Helvetica,sans-serif;font-size:small;color:rgb(32,33,36)"><a href="mailto:help@digitalforces.com" style="color:rgb(17,85,204)" target="_blank">help@digitalforces.com</a> </b><span style="font-family:Arial,Helvetica,sans-serif;font-size:small;color:rgb(32,33,36)">(</span><b style="font-family:Arial,Helvetica,sans-serif;font-size:small;color:rgb(32,33,36)">faster and better than my personal email or phone number</b><span style="font-family:Arial,Helvetica,sans-serif;font-size:small;color:rgb(32,33,36)">; reaches multiple people 7:00 AM to 5:00 PM, M-F, Central Time)</span><br></span></p></span><div dir="ltr">Urgent support: 630-978-2000 X 1 (<b>if possible, email help first and then call to make sure it's handled quickly</b>)<br>Direct/text: 630-299-4971</div></div></div></div><br></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Mon, Jan 12, 2026 at 2:23 PM Ross Finlayson <<a href="mailto:finlayson@live555.com">finlayson@live555.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Dominik,<br>
<br>
This will happen at some point, but is being held up by technical issues (on our web server, we currently run a sshd server on port 443, as a way to allow ssh login across some firewalls that block ports other than 80 and 443).  This is not a high priority, though, as none of the data provided by our web server is confidential.<br>
<br>
Note that if you are concerned about the integrity of our source file tarball, we also provide a SHA1 fingerprint ("live555-latest-sha1.txt”) which you can use to compare against running “sha1” on the “.tar.gz” file.<br>
<br>
<br>
Ross Finlayson<br>
Live Networks, Inc.<br>
<a href="http://www.live555.com/" rel="noreferrer" target="_blank">http://www.live555.com/</a><br>
<br>
<br>
_______________________________________________<br>
live-devel mailing list<br>
<a href="mailto:live-devel@lists.live555.com" target="_blank">live-devel@lists.live555.com</a><br>
<a href="http://lists.live555.com/mailman/listinfo/live-devel" rel="noreferrer" target="_blank">http://lists.live555.com/mailman/listinfo/live-devel</a><br>
</blockquote></div>