3 ms·
You need to make sure the hash is also not tampered, both on server and in flight to the user. How do you do that? If the answer is: use TLS, there is no point
by dullgiulio 8y ago
You need to make sure the hash is also not tampered, both on server and in flight to the user. How do you do that?
If the answer is: use TLS, there is no point in having the file hash at all.
- dijit 8y agoNo, the answer is to use PGP and a manifest hash. This is how package managers work. TLS doesn't replace those.