[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ALL] SHA-1 vs. SHA-256

On 18/05/2018 17:30, Gary Gregory wrote:

> Thoughts?

I wouldn't bother. The checksum is just there to ensure the download
worked properly, and for this even md5 is fine.

The authenticity of the artifacts is ensured by the GPG signatures.

Emmanuel Bourg

To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx