[Enigmail] Enigmail 0.94.4 signature bad / different files on 2 servers

[Patrick Brunschwig]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hendrik Tessendorf wrote:
> Hi!
> 
> The signature ("enigmail-0.94.4-win+lin+mac.xpi.asc")
> for v0.94.4 does not work when downloading from here:
> http://enigmail.mozdev.org/download.html
> 
> For details see below.
> OT note: Why are "v0.94.4" and "v0.95.2" not mentioned on http://enigmail.mozdev.org/news.html?

Because I forgot to update the web page -- thanks for noticing.


> 1. "v0.94.4"
> There are 2 files with different names that have different contents.
> A single signature file is provided, which obviously cannot work for both:
> It works only for one file.

Right, again my fault ;-( I forgot to update the file and signature on
www.mozilla-enigmail.org after the version was released on
addons.mozilla.org (see below)

[...]

> (1.) is bad. Looks like the "mirrors" are out of sync. Please fix this.

done

> (2.) is ok for me, it is just not convenient
>      (e.g., it does not work like said under "Signature Checking")

That's because we want to offer the releases if possible through
addons.mozilla.org (AMO) for security reasons -- most people don't check
the signature. However, we cannot upload signature files to AMO, so
these are still offered on our own web site. The problem is that AMO
staff sometime need quite a while to review & release new versions, and
if I don't want to wait, I offer the files temporarily from our own web
site.
E.g. for v0.94.4 I didn't want to wait, since Thunderbird 1.5.0.12 was
blocking Enigmail (I was actually right, it took more than 1 week).

- -Patrick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEVAwUBRonzZ3cOpHodsOiwAQIMUggAuyR51njgYuD1HBulZG2+sSqZNzrhZf6w
F3MN6AtHUkYoYfBsMkBybUKc5lZooeqlfVXDX4dsoHstRNA35Z7JD/PFWg5w0A9a
WWHOXc0yAv1ypQjPaw2M3iONGDra5sWU7J7/GPz6zxwrR2l4xMCaRvBEROfxf7Xt
zXuPosj8nck03+TjdPGxEH8RYSoLRfPyRHr3T8btWhc17WAEoO9XgTUn5REH4bfX
lF2MtqyYhZhhRCMX+RK7rvbfOR+W/+nX+awEOoT8bs4qjUfhcLhzyzan4SNWtj26
hfy1sIQ5sdeBM90Mgi3KwMA2B4nwXytHf1vw+IUkDTEoQD1FvEo0oQ==
=naR0
-----END PGP SIGNATURE-----