> The md5sum files inside the package as they are now can be generated > at install time by anyone who wishes to have them. Security wise they > are useless and for accidental corruption they are redundant (since > they can be generated at install time). > > Thus they just waste space and bandwith. A lot more and larger things could be generated at install time. They do save time. Also, they can detect corruption during installation after installation. Regards T.
Attachment:
pgpUHqu8H7QOj.pgp
Description: PGP signature