1

How do we ensure that the MyMonero executable is legit? The sha hashes are published on Github, but where is the maintainer's public key to check that he signed the executable or zip file? That's the only sure shot of confirming that the file is not tampered with.

New contributor
joey is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
2

At the moment, the releases up until now haven't been signed.

What is possible at the moment is you could clone the existing GitHub repository at https://github.com/mymonero/mymonero-app-js and build the desktop app from source. We realise this is a bit cumbersome.

That said, there will be a new version released soon with GPG-signed hashes, and all future versions will be signed in the same fashion.

Hope that helps.

| improve this answer | |
New contributor
Karl Buys is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.

Your Answer

joey is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.