Dropping older, less-secure checksums files
We currently make 4 different checksums files for installer, live and
openstack images published from cdimage.d.o (aka get.d.o, cloud.d.o):
MD5SUMS, SHA1SUMS, SHA256SUMS and SHA512SUMS.
Prompted by a discussion on irc a couple of days back, I'm looking
into dropping generation of the older, less secure MD5 and SHA1
checksums. I'm planning on leaving these alone for existing releases,
including for future stretch and buster point release builds. But for
regular daily/weekly builds of testing/bullseye images, I'm going to
drop the MD5SUMS and SHA1SUMS files.
Shout now if you have a problem with that...
Steve McIntyre, Cambridge, UK. firstname.lastname@example.org
Debian does NOT ship free CDs. Please do NOT contact the mailing
lists asking us to send them to you.