Hash & file signature to check VPN installer integrity

[mano93]

Hi everybody,

when we talk about security, we can use VPN like the perfect privacy one.
I use it on Windows.
Now I want to use it on Android.
I can easily download apk directly from the Perfect Privacy website (https://www.perfect-privacy.com/en/vpn-apps)
If the file can be installed and works I would say that the file has been downloaded correctly.
But that doesn't say if the file is safe or not.
So often, editors propose at least checksum and and also file signature in order to be sure the vpn app you download and install is safe and not modified by anyone.

I didn't find any post about checksum and file signature but perhaps I missed something.
Is there any location where we can find file signature and checksum?
Even the exe or apk is not signed. Annoying when we are talking about security software...

Thanks in advance for your replies & help

Mano93

 

[Andrwho]

Yeah I'm not super keen on not being able to chat with someone who works here and get solid information. It's odd the price is high considering their ipv6 support doesn't work. I'll go back to the $3 service that had live chat w ipv6 and hardly anyone uses it so the developer gives you beta builds from play store if you sign up. I knew the app was fairly... funny.

 

[Andrwho]

Almost forgot. It's at the bottom you'll see it. https://www.perfect-privacy.com/en/contact
Pretty funny that they bother to encrypt their email but don't bother with a for hash. Even mundane companies give you a hash.

 

[mano93]

Hi @Andrwho,

so it seems I'm not alone to wonder about hash.
I will try to contact them directly...

 

[mano93]

Hi,

just to let you know that in fact, if you download the apps (exe, apk or any format) while you didn't login, the checksum is not available.
But if you login to your account, you have access to sig file and/or SHA256 checksum.

so https + login + checksum might be enough