News for hackers. Stuff that matters.

A comment on What is the point of a public key fingerprint?. Parent comment

Re:What is the point of a public key fingerprint? by Retr0id on Sunday December 17, 2023 @01:25AM (#38670803)
The whole point of fingerprinting is to produce something that's feasible to manually verify, as described in the article. If you're comparing in software there's no need to hash first (unless it's part of a certificate chain etc.)
[ Parent | on HN ]
Re:What is the point of a public key fingerprint? by pdn1 on Sunday December 17, 2023 @02:33AM (#38671056)
There is a need... If you compare untrusted files with trusted software.... At the very least, it should be an additional check because I'm pretty sure that this example could have fooled me... But diff would have had no issues
[ Parent | on HN ]