Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
Request for more technical release information
Hi 1password team,
I was wondering if there is a changelog of all application releases with SHA256 signatures?
The claim is that a public list of known releases helps with tracking signed binar...
Hi Dave,
Thanks for the reply.
Regarding
"signed binaries in the wild"?
Having a list of signed binaries (specifically their sha256 checksums or equivalent) helps with zero trust auditing, especially for when things go wrong.
The security community can independently verify all production binaries of 1Password that has ever been released and detect "special builds" that aren't supposed to be released.
It is a statement an entity says to everyone - this is the only checksum for this version / architecture of 1Password, if you see any other checksum - send it to us so we can trackdown where it came from.
