From https://boinc.berkeley.edu/wiki/BOINC_Security

So, if you're concerned about security (and you should be!) don't attach to a project unless it can convince you that it follows the code-signing procedure correctly. Ask project administrators to describe how they do code signing.

So here I am, asking about your code signing procedures.

The project does use code signatures. The BOINC Manager then verifies each download against the signature to assure nothing has been modified or corrupted during the file transfer. But I'll check with David Kim and see if there is something more specific he can provide.

---

Rosetta Moderator: Mod.Sense

We do follow the guidelines.

---

We do follow the guidelines.

So the code-signing keys are not on a network-connected computer?