[Python-Dev] [python-committers] [RELEASED] Python 3.5.0a4 is now available

[Steve Dower]

Whoops, sorry. Yeah, I knew about that behavior, but in hindsight it's obviously going to be a surprise for others :)

One plain zip file coming up for the next release. All the binaries will be signed and paranoid people can check the GPG sig and embed their own hashes if not the files themselves.

Cheers,
Steve

Top-posted from my Windows Phone
________________________________
From: Paul Moore<mailto:p.f.moore at gmail.com>
Sent: ‎4/‎22/‎2015 5:48
To: Steve Dower<mailto:Steve.Dower at microsoft.com>
Cc: Larry Hastings<mailto:larry at hastings.org>; Python Dev<mailto:python-dev at python.org>
Subject: Re: [python-committers] [RELEASED] Python 3.5.0a4 is now available

On 22 April 2015 at 13:45, Paul Moore <p.f.moore at gmail.com> wrote:
> On 21 April 2015 at 23:05, Steve Dower <Steve.Dower at microsoft.com> wrote:
>> I made it a self-extracting RAR file so it could be signed, but I've already had multiple people query it so the next release will probably just be a plain ZIP file. I just need to figure out some reliable way of validating the download other than GPG, since I'd like installers to be able to do the download transparently and ideally without hard-coding hash values. I might add a CSV of SHA hashes to the zip too.
>
> You could probably just leave it as is (or make it a self-extracting
> zip file) and just describe it on the web page as "Windows amd64
> embeddable self-extracting archive". People are (I think) pretty used
> to the idea that they can open a self-extracting archive in tools like
> 7-zip, so those who didn't want to run the exe could do that (and
> would know they could). Obviously extracting that way you don't get
> the signature check, but that's to be expected.

Whoops, no - I changed my mind. If you double click on the downloaded
file (which I just did) it unpacks it into the directory you
downloaded the exe to, with no option to put it anywhere else, and no
UI telling you what it's doing. That's going to annoy people badly.
Better make it a simple zipfile in that case.

Paul (off to tidy up his download directory :-()
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-dev/attachments/20150422/a1e25214/attachment-0001.html>