Good enough for verifying integrity in transit ("the line didn't mangle any bits"). Without a side channel, that's all the hashes are good for (if someone can g

Good enough for verifying integrity in transit ("the line didn't mangle any bits"). Without a side channel, that's all the hashes are good for (if someone can get a rogue version on a site, they can also change the hashes displayed on the same site).