On Wed, Mar 16, 2016 at 9:36 AM, Paul Wise wrote: > The Hash: SHA1 is in the InRelease files: BTW, some OpenPGP best practices: https://help.riseup.net/en/security/message-security/openpgp/best-practices -- bye, pabs https://wiki.debian.org/PaulWise