2 ms·
Shouldn't you be using HTTPS for all downloads and grabbing the sha1s and image from different mirrors?
by voltagex_ 11y ago
Shouldn't you be using HTTPS for all downloads and grabbing the sha1s and image from different mirrors?
- nowprovision 11y agoGreat idea.
- acdha 11y agoThat is a good idea but note the use of GPG - if you aren't able to forge that signature, the verification step will fail.
- voltagex_ 11y agoRight, I missed that.