> Why is a hash not sufficient integrity verification? not necessarily endorsing the need for this, but one reason is that if the hash and file are hosted by t

> Why is a hash not sufficient integrity verification? not necessarily endorsing the need for this, but one reason is that if the hash and file are hosted by the same site an attacker who compromised the web server can trivially change the hash to match their payload. With this system, they would have to compromise both the web server and the signing server. You can also leverage this to trust a binary even from an unknown source because the signature will match and confirm authenticity regardless of how trustworthy the source of the binary is.