I agree here... as win10 already gives a certificate and security warning when downloading files from download section.





Quote Originally Posted by CaptCrash View Post
Then how about posting the files in a non zipped format.

1. The file date and time will be that of the firmware not of some intermediatory file
2. Customers will be able to verify the file size and date of the actual firmware
3. Static compression can be enabled on your server if it is not already to deliver the files in a compressed manner (achieving the same thing as zipping them)
4. A step can be reduced from the workflow of both GHL and your customers, so your firmware files don't need to be zipped

From a security point of view you are creating a bad situation, where by the customers ability to validate files is taken away.
Is this really the security stance GHL wants to provide to its customers, for them to just assume that a file is correct?