> > You mean the source files that you downloaded and then hashed... >
Yes. If the source files are being modified via a MITM attack (which is trivial if the host uses HTTP) the checksum is still useful.
Re: [arch-general] Stronger Hashes for PKGBUILDs
Maxwell Anselm via arch-general Sat, 03 Dec 2016 20:38:43 -0800
- [arch-general] Stronger Hashes for PKGBUIL... fnodeuser
- Re: [arch-general] Stronger Hashes fo... Chris Tonkinson
- Re: [arch-general] Stronger Hashes fo... sivmu
- Re: [arch-general] Stronger Hashe... Maxwell Anselm via arch-general
- Re: [arch-general] Stronger H... sivmu
- Re: [arch-general] Strong... Maxwell Anselm via arch-general
- Re: [arch-general] S... sivmu
- Re: [arch-genera... Eli Schwartz via arch-general
- Re: [arch-ge... Maxwell Anselm via arch-general
- Re: [arch-ge... sivmu
- Re: [arch-ge... Eli Schwartz via arch-general
- Re: [arch-ge... sivmu
- Re: [arch-ge... NicoHood
- Re: [arch-general] S... David C. Rankin
- Re: [arch-genera... Gregory Mullen
- Re: [arch-ge... Allan McRae
