Secure distribution of files

[snoken]

Please add a possibility to do an authenticy check of the files
on download. Preferably pgp-sign the files and make the signature file downloadable a long with the program files.

Publish the signing key and it's fingerprint at the projekt site for
verification.

For the same reason: publish a secure hash of the program files at
the project site. md5 is broken, SHA-1 can be used for some time, but preferable SHA-256 could
be used. (I recently encountered a SHA-1 collision for two slightly different program files.)

Rational:
UltraVNC has security implications and should be securely distributed.

[Rudi De Vos]

We are planning to buy a certificat to sign the software. (auth signing)
After signing exe are protected and installation will no longer complain
on unknown originin.

Thanks to donations we can spend a 200$ for a offical cert.
Don't know what encryption is used by the MS signing tools, but as they use it thereself it should do the trick.

[redge]

I would happy to send 200$ for sign the software by Rudi De Vos, pchelpware
so, there no problem for antivirus and spyware and support can be downloadable from some cybercafe allow only signed software to be used.
the example at Geneva, train station.

[snoken]

What about the DSM-plugins for encryption?

[Rudi De Vos]

There is a 256bit encryption and DH 512 buildin.
For Pchelpware concept, buildin encryption is better.