Talk:Hashes & Checksums

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 00:39, 4 December 2007 (edit)
Soulstace (Talk | contribs)
m (Talk:Hashes moved to Talk:Hashes & Checksums: More descriptive title. Hopefully more people will find it via Wiki search and contribute.)
← Previous diff
Revision as of 08:02, 17 January 2008 (edit) (undo)
Soulstace (Talk | contribs)
(Why https doesn't completely solve the issue)
Next diff →
Line 1: Line 1:
-update for sp2?--[[User:Whiteboy|whiteboy]] 06:07, 3 Oct 2006 (CEST)+update for sp2?
 + 
 +--[[User:Whiteboy|whiteboy]] 06:07, 3 Oct 2006 (CEST)
 + 
 + 
 +Hello MrElvey,
 + 
 +Thanks for contributing to the article :)
 + 
 +The main issue with ''user-generated'' hashes, is that there is no way to verify that the hash is correct (even when using an encrypted https/ssl connection).
 + 
 +It is entirely possible that a user-generated hash was generated from a corrupt firmware file downloaded from dd-wrt's website. This is precisely why the hashes must be posted by the developers themselves (and as I have mentioned, Eko has begun doing just that).
 + 
 +The encrypted connection would put an extra layer of security around the hashes, however it still does not solve our original problem of the user-generated hashes themselves.
 + 
 +Perhaps you realize this already, but just thought I would mention it for our users.
 + 
 +--[[User:Soulstace|Soulstace]] 09:02, 17 January 2008 (CET)

Revision as of 08:02, 17 January 2008

update for sp2?

--whiteboy 06:07, 3 Oct 2006 (CEST)


Hello MrElvey,

Thanks for contributing to the article :)

The main issue with user-generated hashes, is that there is no way to verify that the hash is correct (even when using an encrypted https/ssl connection).

It is entirely possible that a user-generated hash was generated from a corrupt firmware file downloaded from dd-wrt's website. This is precisely why the hashes must be posted by the developers themselves (and as I have mentioned, Eko has begun doing just that).

The encrypted connection would put an extra layer of security around the hashes, however it still does not solve our original problem of the user-generated hashes themselves.

Perhaps you realize this already, but just thought I would mention it for our users.

--Soulstace 09:02, 17 January 2008 (CET)