On Thu, Feb 1, 2024 at 12:22 PM Gilles Peskine via mbed-tls wrote:
Checking our historical releases, it turns out we've made this mistake many times. In fact we've almost never posted the checksum for the correct name!
Just curious, but does that include the 2.x releases?
I wouldn't swear to it, but I _think_ I usually verified the checksum to make sure nothing was corrupted in the download (gently pushing back on the 'probably no-one checks on them' idea).
Are checksums important in this day and age?
I'd say nice but not all that important. I don't see a checksum on the same webpage linking to the download as anything more than a way to verify that the download wasn't corrupted.
Lee