0

I was getting really nervous about using the Monero wallet. It seemed like the download page was ww.getmonero.org/downloads, which I thought was weird. Additionally, the executable for Windows wasn't signed at all.

It this correct? If it is, it should change.

Monero is one of the most steal-able cryptos.

0

The website URL is correct. Once you've downloaded, you can check against the supplied hash and verify the signature of the hashes list. Details on the releases page of the project (where you can also download from).

Instructions on how to verify your download can be found here.

  • So there is no code signing cert? Seems like a very very bad policy. I'm technical enough to verify, but ... really? – monerous Mar 19 at 1:09
  • The hashes are signed. It's another way of achieving the same result but without having to individually sign each download - sign one list of hashes. – jtgrassie Mar 19 at 1:13
  • The trouble I see is that I don't necessarily know the true domain name (which I was nervous bout the two different download pages), so I thought that I could be getting phished on even the verification process. Additionally, if we want more mainstream adoption, it would be a much better policy to have Microsoft not complain about legit downloads. Anyway, thank you. You've made me less nervous. – monerous Mar 19 at 1:17
  • The releases are always listed on the projects releases page I linked in the answer, along with the signed hashes. This works almost identically to Bitcoin (and other open-source software). With regards to signing for OSs such as for Microsoft/Apple, that's a very different scenario and requires getting a developer certificate from MS/Apple. – jtgrassie Mar 19 at 1:25
  • And as for the domain name, getmonero.org is the official domain name. There are various host names, ww is one of them. – jtgrassie Mar 19 at 1:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.