<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">[Resending - screenshot was too big]</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Actually, the OS does that even if we don't pay attention, so apparently people just haven't gotten around to upgrade and we haven't had new Mac users installing 3.5.3 yet. (To a first approximation, that is - some will of course know how to bypass the signature check). <br class=""><br class="">-pd<br class=""><br class=""><blockquote type="cite" class="">On 14 Mar 2019, at 14:36 , Simon Urbanek <<a href="mailto:simon.urbanek@R-project.org" class="">simon.urbanek@R-project.org</a>> wrote:<br class=""><br class="">Marc,<br class=""><br class="">thanks, I'm glad that at least someone pays attention and checks the signature ;). I'm surprised my machine didn't raise a flag - I did test the image locally from the master URL before releasing.<br class=""><br class="">I have now updated the package to be signed, it is identical content, just signed. You can get is from the Mac master server <a href="https://mac.r-project.org/bin/macosx" class="">https://mac.R-project.org/bin/macosx</a> now and other CRAN servers will sync in due time.<br class=""><br class="">Thanks,<br class="">Simon<br class=""><br class=""><br class=""><br class=""><blockquote type="cite" class="">On Mar 14, 2019, at 8:18 AM, Marc Schwartz via R-SIG-Mac <<a href="mailto:r-sig-mac@r-project.org" class="">r-sig-mac@r-project.org</a>> wrote:<br class=""><br class="">Hi,<br class=""><br class="">I just tried to install the R 3.5.3 macOS binary from CRAN.<br class=""><br class="">The SHA hash matches what is on CRAN, but I get an unknown developer message when I try to install.<br class=""><br class="">I get:<br class=""><br class="">pkgutil --check-signature R-3.5.3.pkg<br class="">Package "R-3.5.3.pkg":<br class=""> Status: no signature<br class=""><br class=""><br class="">I rechecked the 3.5.2 binary and do not have the issue there.<br class=""><br class="">Thanks,<br class=""><br class="">Marc Schwartz<br class=""><br class="">_______________________________________________<br class="">R-SIG-Mac mailing list<br class=""><a href="mailto:R-SIG-Mac@r-project.org" class="">R-SIG-Mac@r-project.org</a><br class=""><a href="https://stat.ethz.ch/mailman/listinfo/r-sig-mac" class="">https://stat.ethz.ch/mailman/listinfo/r-sig-mac</a><br class=""></blockquote><br class="">_______________________________________________<br class="">R-SIG-Mac mailing list<br class=""><a href="mailto:R-SIG-Mac@r-project.org" class="">R-SIG-Mac@r-project.org</a><br class=""><a href="https://stat.ethz.ch/mailman/listinfo/r-sig-mac" class="">https://stat.ethz.ch/mailman/listinfo/r-sig-mac</a><br class=""></blockquote><br class=""><div class="">-- <br class="">Peter Dalgaard, Professor,<br class="">Center for Statistics, Copenhagen Business School<br class="">Solbjerg Plads 3, 2000 Frederiksberg, Denmark<br class="">Phone: (+45)38153501<br class="">Office: A 4.23<br class="">Email: <a href="mailto:pd.mes@cbs.dk" class="">pd.mes@cbs.dk</a> Priv: <a href="mailto:PDalgd@gmail.com" class="">PDalgd@gmail.com</a><br class=""><br class=""><br class=""><br class=""><br class=""><br class=""><br class=""></div><img apple-inline="yes" id="7A2CBD0B-D021-478D-A8E5-24BDDB26E728" width="465" height="226" src="cid:DD9E1514-74C4-4D42-9F50-C5EA570BEE69@hhk.dk" class=""></div></body></html>