5.1 Security Considerations for Implementers

  • Article

The manifest file contains the results of the SHA-1 hashing calculation. Note, however, that the SHA-1 hash value is used as an optional means of checksum verification of the downloaded file, and it should not be used as a security feature. In particular, it does not prevent deliberate data tampering.