[Translating] How to verify the authenticity and integrity of a downloaded file on Linux

This commit is contained in:
zhengsihua 2014-10-19 12:39:14 +08:00
parent c7741a2cac
commit b6e3b1f3d8

View File

@ -1,3 +1,5 @@
Translating----geekpi
How to verify the authenticity and integrity of a downloaded file on Linux
================================================================================
When you download a file (e.g., an installer, an ISO image, or a compressed archive) from the web, the file can be corrupted under a variety of error conditions, e.g., due to transmission errors on the wire, interrupted download, faulty storage hardware, file system errors, etc. Such failure cases aside, a file can also be deliberately tampered with by determined attackers during or before download. For example, an attacker with a compromised certificate authority could mount a man-in-the-middle (MITM) attack, tricking you into downloading a malware-ridden file from a bogus HTTPS website.