2 ms·
Checking hashsums against downloaded hashsums file is pointless. If you're being MITMed (and downloading from `http` is asking for being MITMed), you'll downloa
by vbezhenar 5y ago
Checking hashsums against downloaded hashsums file is pointless. If you're being MITMed (and downloading from `http` is asking for being MITMed), you'll download fake checksum. Proper check will require using GPG with pinned keys.