10 ms·
It doesn't have to be a simple hash either. You could have the author/release engineer sign it and then use the signature instead. This somewhat mitigates simpl
by ketralnis 12y ago
It doesn't have to be a simple hash either. You could have the author/release engineer sign it and then use the signature instead. This somewhat mitigates simple hash collisions
- TazeTSchnitzel 12y agoThat's an even better idea, I like it!
- AgentME 12y agoDon't most systems for signing files just sign the hash of the file anyway?