3 ms·
I don't see much value in published file hashes when they're hosted on the same site that hosts the files. If someone compromises the download link they're prob
by flurpitude 10y ago
I don't see much value in published file hashes when they're hosted on the same site that hosts the files. If someone compromises the download link they're probably in a good position to update the hashes too.
- 0x0539 10y agoThe purpose of the hashes isn't to prove the file hasn't been tampered with, its confirm that the file wasn't corrupted during download.
- bashinator 10y agoThen just use checksum instead of an obsolete cryptographic hash.