2 ms·

Yeah - except if you owned the domain, you can also change the posted hash you are comparing against. Security theater mostly.

• open1414 5y ago
  It's mostly for applications which hosts their binaries on third party servers
• MaxLeiter 5y ago
  Or he posts the hash on another service
• celdon25 5y ago
  That's why you validate it against wayback machine, mailing list archives, multiple devices, and so on.