Bug#387202: cdimage.debian.org: Missing md5sum for Sarge 3.1_r3 NetInstall CD
Package: cdimage.debian.org
Severity: normal
The MD5SUM for the NetInstall CD and business card CD are missing,
at least for the x86 architecture (the other arch I checked had it,
including the 3.1_r2 x86 version).
http://cdimage.debian.org/debian-cd/3.1_r3/i386/iso-cd/
It would be good to have them so that we can at least check that
we downloaded the ISO properly. I am surprised it was not reported before.
I sometime like to validate that the ISO on my mirror are good ones.
I would suggest that you also provide a signed SHA-1 hash instead
of just a MD5 hash. Finding a collision with MD5 is now very fast
(less than a minute), so signing an MD5 hash just give a false sense of
security in my opinion.
Simon Valiquette
http://www.gulus.org
http://gulus.USherbrooke.ca
Reply to: