4 ms·
On the other hand, this is a nice TOFU-style double check. The first time HN user "defanor" went to that page, these were the fingerprints; if later someone som
by cesarb 4y ago
On the other hand, this is a nice TOFU-style double check. The first time HN user "defanor" went to that page, these were the fingerprints; if later someone somehow invades the github documentation server (or somehow MITMs your HTTPS connection to it), and changes the fingerprints there, they will no longer match the ones saved in the comment above.
- NelsonMinar 4y agoWell, "defanor" says these were the fingerprints. Perhaps they are the MITM. (Not genuinely concerned about this risk, but "Reflections on Trusting Trust" reverberates.)