Plugin zip file checksums vary

  • Hello

    Is it normal to get different checksums for the same plugin’s, same version zip file at different times? I’ve tried using various systems and also online md5sum tools. For example contact form 7:

    https://downloads.www.ads-software.com/plugin/contact-form-7.3.6.zip

    Some of the md5sums I’m getting:

    360f187336194dde8961160c585ba413 ../contact-form-7.3.6.zip
    a131a53a63f667d00061ba089c10e2c1 ../contact-form-7.3.6.zip.1
    501b5a06217f9c904078a789809a321e contact-form-7.3.6(1).zip

    Download this file and do an md5sum. Then wait a few minutes, download it again and do another md5sum. Repeat again. You will find a different md5sum is generated. Is this because the plugin zip files are dynamically created?

Viewing 1 replies (of 1 total)

  • I found the same discrepancy, but unpacking those files and running “diff -r <plugin-before> <plugin-later>” showed no differences. So only the zip-files differ, not their content. This is bad for security aware people, because you cannot easily distinguish between original and man-in-the-middle changed files.

Viewing 1 replies (of 1 total)
  • The topic ‘Plugin zip file checksums vary’ is closed to new replies.