Comment 8 for bug 84273

Revision history for this message
Colin Watson (cjwatson) wrote :

Matthew: the users in question obviously didn't notice MD5SUMS.gpg right alongside MD5SUMS, which (if you care enough to check it) is probably considerably more secure than HTTPS certificates. Who ever bothers to check the full HTTPS certificate chain?