Re:Wcurl Is Here
by saurik on Friday August 23, 2024 @05:25PM
(#41333247)
A MITM situation is relevant even without a credential and isn't at all about privacy: an attacker can swap out a different file for the one you wanted to download.
[ Parent
| on HN ]
Re:Wcurl Is Here
by firesteelrain on Friday August 23, 2024 @05:28PM
(#41333275)
You are right. Hash (if provided) would still need to be verified upon download