[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Dropping older, less-secure checksums files



Hey folks,

We currently make 4 different checksums files for installer, live and
openstack images published from cdimage.d.o (aka get.d.o, cloud.d.o):
MD5SUMS, SHA1SUMS, SHA256SUMS and SHA512SUMS.

Prompted by a discussion on irc a couple of days back, I'm looking
into dropping generation of the older, less secure MD5 and SHA1
checksums. I'm planning on leaving these alone for existing releases,
including for future stretch and buster point release builds. But for
regular daily/weekly builds of testing/bullseye images, I'm going to
drop the MD5SUMS and SHA1SUMS files.

Shout now if you have a problem with that...

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
Google-bait:       http://www.debian.org/CD/free-linux-cd
  Debian does NOT ship free CDs. Please do NOT contact the mailing
  lists asking us to send them to you.


Reply to: