Sublime Forum

Digitally Signed Downloads

#1

I may be crazy, but I can’t find signed downloads or really any sort of verification of sublime text’s packages or binaries. An md5sum would be a good step in the right direction, as it mitigates the opportunities for successful MITM attacks, although obviously going whole hog would be ideal for code run locally on thousands of developers’ environments.

Hope this is in vain and there’s a keyserver with your credentials I just couldn’t find!

0 Likes