3 ms·
If you get the signature from the same place you found the download link (or a place that may be controlled by the same entity), that seems precisely as good as
by chc 10y ago
If you get the signature from the same place you found the download link (or a place that may be controlled by the same entity), that seems precisely as good as HTTPS.
- yoha 10y agoYou are thinking of hashes. Look up cryptographic signatures. https://en.wikipedia.org/wiki/Digital_signature https://en.wikipedia.org/wiki/Digital_signature