Christian PERRIER wrote: > See Ganneff's last remark about D-I images. We should maybe provide > more hashes of D-I images, from what I understand. Looking at the Release file contents, I don't think we need to. It already has sha1 and sha256 checksums of the d-i files now. ftp://ftp.debian.org/debian/dists/unstable/Release The only reason to provide standalone MD5SUM or other files is for users who want a rough check of a d-i image, not something with a cryptographically secure trust path. The real d-i fallout from the Release file changes is that it breaks debootstrap (and cdebootstrap but I am not going to spend any time on that). -- see shy jo
Attachment:
signature.asc
Description: Digital signature