Comments (3)
I don't see how I can upload anything there, but you can download the repo as a tarball from there already.
The problem for you to rely on my uploaded tarball via HTTPS on github is that you then haven't verified that the package comes from me. The only way to verify that is to verify the GPG key for the tarball (as I signed the packages immediately after I made them on my local machine). I already provide the signatures on the libssh2.org site. You can probably get a fair certainty level by seeing that it is signed by the same key like the previous releases (that you might trust already).
And no, it is actually not that easy to just transfer the site to github. Or rather, it would require someone to generate the site and then copy it over so that it will continue to adapt to git repo contents - if it were to keep the current setup. Not that bandwidth costs is a particular concern for this little-visited web site.
In fact anyone can verify the package and put it on a HTTPS site. Or make their own. All the code I made the package from is in the git repo. I'm already waaaay behind on work for libssh2, I cannot take on any more.
from libssh2.
You need to be logged in, then click on "edit repository", and then you can add files near the bottom of the form. Only members of the libssh2 organisation can upload files. This ensures that attackers can't intercept and manipulate the binary.
And I believe you misunderstood my other comment; I just meant to say that you could link to the release tarball on Github rather than host it on your server; or even in additition to hosting it on your server. However, since the tarball is only 700kB this probably doesn't pay off. It does pay off if you host larger downloads (for example, since hosting the Postgres.app binary on Github, we save around $100 bandwidth costs for S3 per month).
from libssh2.
1.6.0 is now (also) available here: https://github.com/libssh2/libssh2/releases
from libssh2.
Related Issues (20)
- (question) when is the terrapin fix going to be released? HOT 1
- libssh2 in PHP: how can I check the supported ciphers and mac algorithms HOT 1
- compilation error with cmake, without passing -DENABLE_ZLIB_COMPRESSION=ON HOT 2
- Unused code setting channel ignore mode HOT 3
- After running this code, the memory usage continuously spikes. What could be the reason? libssh2-1.10.0 HOT 9
- KEX extension indicators are lost in libssh2_session_method_pref() HOT 3
- libssh2 tests are failing HOT 1
- Encrypt-then-MAC feature should be tested in remote end's configuration when receiving data
- Fix AIX build HOT 1
- SFTP failed with the error -41 working with Openssl HOT 9
- libssh2_session_handshake() hangs HOT 3
- libssh2_session_handshake LIBSSH2_ERROR_KEY_EXCHANGE_FAILURE HOT 6
- Key exchange issue on Debian 12 (Bookworm) HOT 4
- LIBSSH2_ERROR_EAGAIN ambiguity HOT 2
- Instable connections in case of SSH transfers over nonblocking sockets HOT 7
- IPv6 format & host key validation with known_hosts file
- Memory leak in _libssh2_transport_read HOT 2
- MAXPATHLEN not defined on hurd systems HOT 4
- CMakeLists defines hidden in C flags, but doesn't define LIBSSH2_API to unhide them HOT 4
- The function "agent_sign" seems to always return ERROR HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from libssh2.