News for hackers. Stuff that matters.

A comment on The sad state of Linux download security. Parent comment

Re:The sad state of Linux download security by chc on Sunday July 17, 2016 @12:50PM (#12110759)
If you get the signature from the same place you found the download link (or a place that may be controlled by the same entity), that seems precisely as good as HTTPS.
[ Parent | on HN ]
Re:The sad state of Linux download security by yoha on Monday July 18, 2016 @09:11AM (#12114826)
You are thinking of hashes. Look up cryptographic signatures.

https://en.wikipedia.org/wiki/Digital_signature

[ Parent | on HN ]