News for hackers. Stuff that matters.
Re:Go 1.15 Released by _wldu on Tuesday August 11, 2020 @05:37PM (#24126304)
They are for integrity checking, not security. PGP signatures are better for the scenario you are describing.
Re:Go 1.15 Released by throwaway43234 on Tuesday August 11, 2020 @05:44PM (#24126380)
Is it a common scenario nowadays to download a file and have it be corrupted? I don't think I've ever had that happen (Though perhaps I wouldn't know, because I don't use these checksums! Though if a package is corrupted and it doesn't noticeably degrade, is it really corrupted? Hm... philosophy of internet downloads)