On 05.02.2015 10:00, Freddie Chopin wrote:
> If the md5 checksum of the package matches the info from the download 
> section, then the packages were NOT tampered with.
For this to be true, the checksums would have to come from a different
source.

If someone can modify the binary on your webserver, he could also modify
the md5sum files.

cu
Michael


------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
OpenOCD-devel mailing list
OpenOCD-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openocd-devel

Reply via email to