What SHA-256 Checksums Prove — Verify Files with HashForge
Use HashForge to verify downloads locally, then learn why checksums prove integrity—not authenticity—and when signatures are required.
Article archive
More articles
Browse older engineering guides and field notes, page 4.
Continue browsing
Articles
How JSON Forge Turns “position 4127” Into a Real Error, In Your Browser
How a browser-only JSON formatter gives exact error line/column, handles 10MB files, and computes JSONPath on click — with the actual code, and why it never uploads your…
The Frankfurter API: Pull ECB Exchange Rates as JSON (No Key, No Rate Limits)
Pull ECB exchange rates as JSON with the Frankfurter API: latest, historical, and full time series. No key, no rate limits. Python examples and the gotchas.
Verifying Webhook Signatures by Hand: HMAC-SHA256 in the Browser with HashForge
A fake webhook can trigger real damage. Here's how HMAC-SHA256 signatures work, why your verification keeps failing, and how to check one by hand in HashForge.
Your Password Generator Is Only as Good as crypto.getRandomValues
How PassForge uses crypto.getRandomValues and entropy math to build passwords that actually resist offline guessing attacks.
The FDIC BankFind API: Pull Any U.S. Bank’s Financials and Failure History as JSON (No Key)
The FDIC BankFind Suite API gives you every insured bank’s call reports, deposits, and failure history as free keyless JSON. Here’s how to query it.