Merge pull request #1860 from geekpi/master

[Translating] How to verify the authenticity and integrity of a download...
This commit is contained in:
geekpi 2014-10-19 12:42:00 +08:00
commit 78b4df66df

View File

@ -1,3 +1,5 @@
Translating----geekpi
How to verify the authenticity and integrity of a downloaded file on Linux
================================================================================
When you download a file (e.g., an installer, an ISO image, or a compressed archive) from the web, the file can be corrupted under a variety of error conditions, e.g., due to transmission errors on the wire, interrupted download, faulty storage hardware, file system errors, etc. Such failure cases aside, a file can also be deliberately tampered with by determined attackers during or before download. For example, an attacker with a compromised certificate authority could mount a man-in-the-middle (MITM) attack, tricking you into downloading a malware-ridden file from a bogus HTTPS website.