Comment 24 for bug 1767402

BTW: How do you verify that the hash sum is the correct one?

If you just download the file from somewhere in the internet and take that hash sum to verify the same file, it's not of much use, from a security point of view. It just proofs that it is the very same file again, but not, that it is the original file. Smells a little bit like snakeoil security.