Comment 33 for bug 1767402
Revision history for this message
| Gianfranco Costamagna (costamagnagianfranco) wrote | #33 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
67d34a1
(Get the code!)
>But then the hashsum check does not provide significantly more security
>than just downloading the file via https.
Hadmut, https doesn't mean connection secure, because we can't generally trust the server PKI, and that link used to be in http only since some months ago. A double check of the hash doesn't hurt.
I might consider removing it if I feel comfortable, but right now with all the sslstrip and ettercap plugins around, this might make security worse.