Quote:
Originally Posted by V48K8B6ZDQD37
Currently there is no way AFAIK to validate that the Calibre binaries are the same as those from the devs. Can we get SHA256 hashes on the Calibre website, or perhaps get the binaries signed by a GPG key that we can verify on our own devices?
Cheers
|
If you look at the
calibre downloads page, you might notice a line that reads:
Signatures for all the calibre installer files are
here.
Click on the "here" and enjoy the signatures for the V5 calibre releases.
BTW, a quick Google search on "calibre signatures" returned that page as the first result.