On 26 June 2018 at 01:05, Tom Kent via Boost-users <boost-users@lists.boost.org> wrote:
Please don't take it on trust. If you get a warning for the binaries, check the hashes, then check the signature on the hashes!

I don't think that hacker would be smart enough to change the boost code, hack into the web-site and replace the binary, while at the same time being so stupid as not to change the hashes as well. The hashes serve to verify that your download was correct, it's not a security.

degski
--
"If something cannot go on forever, it will stop" - Herbert Stein