Comment Comment by _wldu They are for integrity checking, not security. PGP signatures are better for the scenario you are describing. parent _wldu 6 years ago