you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago

My version of questioning this is if the same source is providing both the file and the hash, does it matter how hard it is to fake the hash? It could just generate a new hash for the fake file, couldn't it?

  • source
  • parent