Thanks for the reply. I'd like to add a couple of comments intended to illustrate the whole situation. I'm not trying to pick a fight.
That's true! But expecting a Dolphin user to understand the 7zip code, know how to build from source on Windows, and be willing to put in the time to review the 7zip code just to play with Dolphin seems unrealistic. I fall into the category of "could do that, but no way I'm going to spend the time". I expect most real life users don't even think about security and download 7zip from the 7zip website because that's the shortest route to a working emulator [a].
That's a really good idea, thanks! That's probably what I'll do. FWIW it would be nice to have a gz package so I don't have to install a 7zip program in WSL. Of course, a very small fraction of your users will think of using WSL or even know it exists. Most users are going to continue using untrusted software, and others like me might just give up when they realize that the 7zip website doesn't use HTTPS.
Unpacking Dolphin should be easy and secure on any platform. Presently, unpacking on Windows is not. Releasing a zip would remove the problem for Windows, and releasing a gzip would make it easier on Linux.
Thanks again for the suggestion to use WSL.
[a] Or maybe they use WinZip, which has the exact same problem (website doesn't use HTTPS), or WinRAR if they don't mind the Get WinRAR FREE with TrialPay part.
[b] smashladder is releasing their own package in zip format.
Quote:7-zip is open source so you can securely download the source, inspect it yourself, compile the source, and be on your way.
That's true! But expecting a Dolphin user to understand the 7zip code, know how to build from source on Windows, and be willing to put in the time to review the 7zip code just to play with Dolphin seems unrealistic. I fall into the category of "could do that, but no way I'm going to spend the time". I expect most real life users don't even think about security and download 7zip from the 7zip website because that's the shortest route to a working emulator [a].
Quote:Alternatively, you can use WSL to give yourself a reproducible Linux environment in Win10 where you can download a 7zip extractor securely, and extract Dolphin that way.
That's a really good idea, thanks! That's probably what I'll do. FWIW it would be nice to have a gz package so I don't have to install a 7zip program in WSL. Of course, a very small fraction of your users will think of using WSL or even know it exists. Most users are going to continue using untrusted software, and others like me might just give up when they realize that the 7zip website doesn't use HTTPS.
Unpacking Dolphin should be easy and secure on any platform. Presently, unpacking on Windows is not. Releasing a zip would remove the problem for Windows, and releasing a gzip would make it easier on Linux.
Thanks again for the suggestion to use WSL.
[a] Or maybe they use WinZip, which has the exact same problem (website doesn't use HTTPS), or WinRAR if they don't mind the Get WinRAR FREE with TrialPay part.
[b] smashladder is releasing their own package in zip format.