Dev builds
No dev builds yet.
The first one lands here the moment it has passed the release gate, signed and notarized like every build after it.
Check a download yourself
Each build above has its own copy of these, filled in. In order, they prove the zip is the one we published, the app inside is signed by us and notarized by Apple, and the zip carries the signature FIIP Drive checks before it installs.
- SHA-256.
shasum -a 256 fiipDrive-<version>-<build>.zipprints the same hash as the build's card. - Code signature.
codesign --verify --deep --strictsaysvalid on disk
andsatisfies its Designated Requirement
. - Gatekeeper.
spctl -a -vvsaysaccepted
andsource=Notarized Developer ID
, with originDeveloper ID Application
, team Y27CNN4MVA. - EdDSA. The Swift snippet on each card checks the zip's signature against the public key below, the same key built into FIIP Drive. It needs Xcode or the Command Line Tools and nothing else.
How an update reaches your Mac
- FIIP Drive asks https://dev-updates.fiipdrive.com/appcast.xml for the feed, over HTTPS only. Dev builds read this feed; release builds read updates.fiipdrive.com and never see a dev build.
- Each build in the feed carries an EdDSA (Ed25519) signature of its exact zip. FIIP Drive checks it against the public key built into the copy you already have, and refuses a zip that does not match, whoever served it.
- The app inside is signed with our Developer ID (team Y27CNN4MVA) under the hardened runtime, notarized by Apple and stapled, so Gatekeeper can check it offline.
- Nothing downloads in the background. FIIP Drive installs only when you press Update, and never while a file is still being saved. Your files are not touched by an update.
- Build numbers only go up, so a feed cannot walk your Mac back to an older build. A published zip is never replaced or deleted: the storage behind this page refuses both.
- Feed
- https://dev-updates.fiipdrive.com/appcast.xml
- EdDSA public key
- Kn/twyrmQON9HD01rx6snioLZYIQXzagifsfq3KhPsI=
- Code signature
- Developer ID Application, team Y27CNN4MVA, notarized and stapled
- Architecture
- Apple silicon only
- Transport
- HTTPS only, TLS 1.2 or newer, HSTS for a year
- This page
- Static. No JavaScript, no cookies, nothing loaded from another site.