3 ms·

Edit: Accepted, but does that mean you don't need https for your website? Old text: "The hashes are also not under https domains. How do you know where they co

by erikb 11y ago

Edit: Accepted, but does that mean you don't need https for your website? Old text: "The hashes are also not under https domains. How do you know where they come from?"

mobiuscog 11y ago
Isn't that the point of the signature verification ?
noondip 11y ago
The hashes files are cryptographically signed with GPG. Using the web of trust, you can be sure the files were created by the developers.