New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Validate downloads with checksum #19

Open

math2001 opened this issue Jan 19, 2020 · 0 comments

Collaborator

math2001 commented Jan 19, 2020

From a security point of view, that doesn't provide anything really, because an attacker could change the checksum to match the updated tarfiles.

Nonetheless, this would help guarantee that the download is valid and not corrupted. Maybe this would have helped with #16.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment