[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ALL] SHA-1 vs. SHA-256

> On May 19, 2018, at 5:34 AM, Emmanuel Bourg <ebourg@xxxxxxxxxx> wrote:
> On 18/05/2018 17:30, Gary Gregory wrote:
>> Thoughts?
> I wouldn't bother. The checksum is just there to ensure the download worked properly, and for this even md5 is fine.
> The authenticity of the artifacts is ensured by the GPG signatures.
> Emmanuel Bourg

True, but there's a considerable portion of users who check the checksums and nothing else. 


To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx