> Seeing the same public hashes can work just like people check shasums now, also possible to independently verify at any time “Verify at any time” devolves to

> Seeing the same public hashes can work just like people check shasums now, also possible to independently verify at any time “Verify at any time” devolves to “verify never.” Verification needs to be mandatory to have any security value, which comes back the original point about operationalization.