1

I was getting really nervous about using the Monero wallet. It seemed like the download page was ww.getmonero.org/downloads, which I thought was weird. Additionally, the executable for Windows wasn't signed at all.

It this correct? If it is, it should change.

Monero is one of the most steal-able cryptos.

Improve this question

1 Answer 1

Reset to default
0

The website URL is correct. Once you've downloaded, you can check against the supplied hash and verify the signature of the hashes list. Details on the releases page of the project (where you can also download from).

Instructions on how to verify your download can be found here.

Improve this answer
11
  • So there is no code signing cert? Seems like a very very bad policy. I'm technical enough to verify, but ... really?
    – monerous
    Mar 19, 2019 at 1:09
  • The hashes are signed. It's another way of achieving the same result but without having to individually sign each download - sign one list of hashes.
    – jtgrassie ♦
    Mar 19, 2019 at 1:13
  • The trouble I see is that I don't necessarily know the true domain name (which I was nervous bout the two different download pages), so I thought that I could be getting phished on even the verification process. Additionally, if we want more mainstream adoption, it would be a much better policy to have Microsoft not complain about legit downloads. Anyway, thank you. You've made me less nervous.
    – monerous
    Mar 19, 2019 at 1:17
  • The releases are always listed on the projects releases page I linked in the answer, along with the signed hashes. This works almost identically to Bitcoin (and other open-source software). With regards to signing for OSs such as for Microsoft/Apple, that's a very different scenario and requires getting a developer certificate from MS/Apple.
    – jtgrassie ♦
    Mar 19, 2019 at 1:25
  • And as for the domain name, getmonero.org is the official domain name. There are various host names, ww is one of them.
    – jtgrassie ♦
    Mar 19, 2019 at 1:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.