Hacker News new | ask | show | jobs
by testing12341234 4551 days ago
Checksums do not offer this property if both the remote file and checksum are both sent unsecured. If an attacker can MitM the remote file, then they can also do the same for the checksum file.