3 ms·
TLS only verifies that have connected to the correct server. It can't verify whether the package on the server has been replaced by a malicious one. For that, y
by cesarb 9y ago
TLS only verifies that have connected to the correct server. It can't verify whether the package on the server has been replaced by a malicious one. For that, you need a "md5 of the file" (these days, a sha256, because md5 has long been broken).
- dullgiulio 8y agoYou need to make sure the hash is also not tampered, both on server and in flight to the user. How do you do that? If the answer is: use TLS, there is no point in having the file hash at all.
- dijit 8y agoNo, the answer is to use PGP and a manifest hash. This is how package managers work. TLS doesn't replace those.