I'm an Aerospace Engineer just starting out in my field, I'm planning to start using Python, but I've run into a bit of a conundrum. I downloaded Python(x,y)- Windows installer from here (I found that link on the Official GitHub page), but the executable is unsigned.

Is there any way to verify the authenticity of the executable? Anybody else used this and had problems?

  • 1
    Did you try to ask the developers if they provide signed binaries?
    – Arminius
    Commented Mar 1, 2018 at 21:57
  • I can't find contact info for the dev. Unfortunately, it looks like this may be a dead project as its last update was over two years ago. I'm likely going to grab a different distribution. Should I delete this question?
    – BlueJ2598
    Commented Mar 1, 2018 at 23:32
  • No need to delete the question. It may prove useful to someone else who is wondering the same thing.
    – forest
    Commented Mar 2, 2018 at 2:00

1 Answer 1


Answering to your question and comment:

  1. If you think that the mirror you used could have been compromised, you can download the file from the other 2 mirrors available there and compare the hashes (md5 or sha1) of the downloaded files, the probability of all three sites being hacked is not very high and could help you to feel safer about it.

  2. Checking the official website, I found the History section, here you can find the names of the developer and the maintainer.

History section

If you search for these names on Google, you will be able to find their personal profiles, you can ask them if they provide signed binaries as @Arminius said, or ask them to provide you with the original file, also you can ask them the hash value to compare with the file that you downloaded.

Hope it helps.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .