What do people here think about changing policy to reccommend that packages contain a md5sums file? The md5sums files have been around for over a year now, there is a well defined file format, tools to use it and generate it. The big reason to add it to policy is to make the tools that use it (debsums, mainly) more useful, so they can begin to work on all packages. -- see shy jo