Re:Go 1.15 Released
by _wldu on Tuesday August 11, 2020 @05:37PM
(#24126304)
They are for integrity checking, not security. PGP signatures are better for the scenario you are describing.
[ Parent
| on HN ]
Re:Go 1.15 Released
by throwaway43234 on Tuesday August 11, 2020 @05:44PM
(#24126380)
Is it a common scenario nowadays to download a file and have it be corrupted? I don't think I've ever had that happen (Though perhaps I wouldn't know, because I don't use these checksums! Though if a package is corrupted and it doesn't noticeably degrade, is it really corrupted? Hm... philosophy of internet downloads)