Both are served directly by The Document Foundation's server
download.documentfoundation.org resovles to 89.238.68.185 via 'Google DNS' (8.8.8.8) via TLS over DNS. AS34240 IRR Valid, ROA Signed and Valid Prefix 89.238.64.0/18 Description: manitu GmbH The SHA256 hash "76def06f2a8ecd5803dfbc63995e3963ae46b85e8c1c917541dedab81bd78169" is produced using Windows 11's "CertUtil -hashfile C:\Path.. sha256" command. Does this appear correct to you? On Saturday, December 21st, 2024 at 9:37 PM, Guilhem Moulin <guilhem@libreoffice.org> wrote:
On Sat, 21 Dec 2024 at 08:32:12 +0000, Sunny73Cr wrote:Is that theoretic or are you saying the mirror tampered with the download?TheoreticalYou can compare the checksums against the values from the .mirrorlist URL. And/or verify the detached PGP signature on the downloaded file. Both are served directly by The Document Foundation's server not via mirror redirection. -- Guilhem. -- To unsubscribe e-mail to: mirrors+unsubscribe@documentfoundation.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.documentfoundation.org/www/mirrors/ Privacy Policy: https://www.documentfoundation.org/privacy
-- To unsubscribe e-mail to: mirrors+unsubscribe@documentfoundation.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.documentfoundation.org/www/mirrors/ Privacy Policy: https://www.documentfoundation.org/privacy