cargo-bins/cargo-binstall

Support checksum verification in registry

NobodyXu opened this issue · 1 comments

NobodyXu commented

All registries (https://crates.io , sparse, git) support sha256 checksum for the tarball of crate.
We can implement sha256 checksum in binstalk-downloader and use it in registry first, before doing it for pre-built binaries.

NobodyXu commented

cargo registry uses sha256 checksum:

    // A SHA256 checksum of the `.crate` file.
    "cksum": "d867001db0e2b6e0496f9fac96930e2d42233ecd3ca0413e0753d4c7695d289c",