New Iron-Version: 59.0.3100.0 Stable for Windows

Iron Forum for english speaking people

Saua
Posts: 15
Joined: Fri Jan 15, 2016 2:19 pm

Re: New Iron-Version: 59.0.3100.0 Stable for Windows

Post by Saua »

Unfortunally I will go back to Slim Jet. :cry:
User avatar
SRWare
Site Admin
Posts: 3247
Joined: Sat Jan 19, 2008 4:16 am

Re: New Iron-Version: 59.0.3100.0 Stable for Windows

Post by SRWare »

vanthatou wrote:Development of Iron 60 seems to be stagnant and this website is now full of ads. Admin, please let us know if you are still active.
Will be released today
Iron-Updates via Twitter: http://twitter.com/srware

Donations via Paypal and Bitcoin:
http://iron-start.com/spenden.php
reidtech
Posts: 6
Joined: Wed Jun 28, 2017 1:14 pm

Re: New Iron-Version: 59.0.3100.0 Stable for Windows

Post by reidtech »

SRWare wrote:
vanthatou wrote:Development of Iron 60 seems to be stagnant and this website is now full of ads. Admin, please let us know if you are still active.
Will be released today
Now here's the big question: are you actually Stefan Ries and will the installers for Iron 60 be digitally signed by you?

Even then, since the last signed installer was version 56, signed on ‎Thursday, ‎February ‎09, ‎2017 3:27:29 PM (Certum Code Signing CA SHA2 and countersigned by Symantec Time Stamping Services CA - G2), and the email address used for the signature is on this domain (webmaster@srware.net), how can we be sure that this domain has not been taken over by malign interests?

The registrant for the domain (mostly) checks out on the registrar's (OVH) whois:
But the domains of the contact emails (f.o-w-o.info and d.o-w-o.info) do not resolve. Though they do appear to be owned and self registered by OVH SAS.

Any explanation for what has happened to Iron for the last few versions? Got a new job? Got a divorce? Death in the family?

Please sign the installer for version 60 and assure us that this domain has not been taken over by bad actors.

Using Firefox is killing me. :( :ironvsff
reidtech
Posts: 6
Joined: Wed Jun 28, 2017 1:14 pm

Re: New Iron-Version: 59.0.3100.0 Stable for Windows

Post by reidtech »

On further examination I see that the certificate used to sign version 56 expired 2017-03-11, and that is likely why versions 57, 58 and 59 were not signed.

I see the pricing is reasonable:
http://www.certum.eu/certum/cert,offer_code_signing.xml

Presumably the 28 € OpenSource Code Signing cert applies. That is a really good price!

If the cost of a new certificate is burdensome, perhaps someone could donate the 28 € cost?

Alternatively, since I see you are using OVH for your hosting, it should not be difficult to setup Let's Encrypt for srware.net for free and then post file hashes with the posted installers for good measure...

edit: actually, I see you already have a Comodo domain validation certificate for srware.net that is good until 2018-04-25, so it is just a matter of forcing it with a redirect and/or strict transport and then cleaning up the website code to not reference any http resources to make it look tidy with a green lock icon.

https://www.srware.net/

https://www.srware.net/downloads/srware_iron64.exe
User avatar
SRWare
Site Admin
Posts: 3247
Joined: Sat Jan 19, 2008 4:16 am

Re: New Iron-Version: 59.0.3100.0 Stable for Windows

Post by SRWare »

reidtech wrote:
Any explanation for what has happened to Iron for the last few versions?
It is the original domain. Its an WHOIS protect to avoid spammers.
And we will bring back the signing back soon!
Iron-Updates via Twitter: http://twitter.com/srware

Donations via Paypal and Bitcoin:
http://iron-start.com/spenden.php
Locked