[jitsi-users] How to verify Jitsi download?


#1

I am a
​​
windows-mac​ user.
Downloaded Jitsi right now.

How do I verify my download?
Haven"t found any checksums or *GPG signatures* on the download page (which
is the best because the attacker could change the checksums as well).

Do I miss something?

Alexander


#2

I am a
​​
windows-mac​ user.
Downloaded Jitsi right now.

How do I verify my download?

On Windows: right-click the binary, open the properties, go to the tab "Digital Signatures". You'll find it signed by BlueJimp.
On Mac: The bundle is signed as well. If your Gatekeeper is set to "Mac AppStore and verified developers" then it wouldn't launch with an invalid signature. Alternatively launch a terminal and type codesign -dv /Applications/Jitsi.app

Haven"t found any checksums or GPG signatures on the download page (which is
the best because the attacker could change the checksums as well).

Do I miss something?

Alexander

Ingo


#3

On Windows: right-click the binary, open the properties, go to the tab

"Digital Signatures". You'll find it signed by BlueJimp.

That simple, Ingo?
Thank you very much.

I saw the signature, but had no idea that "BlueJimp" is from the original
Jitsi dev.

I think it could be very useful to publish it on the download page of Jitsi.
Its not "skype" after all, you know. So verifying concerns a lot of users.