[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Dropping older, less-secure checksums files



Am 16.07.2019 um 16:58 schrieb Steve McIntyre:
Hey folks,

We currently make 4 different checksums files for installer, live and
openstack images published from cdimage.d.o (aka get.d.o, cloud.d.o):
MD5SUMS, SHA1SUMS, SHA256SUMS and SHA512SUMS.

Prompted by a discussion on irc a couple of days back, I'm looking
into dropping generation of the older, less secure MD5 and SHA1
checksums. I'm planning on leaving these alone for existing releases,
including for future stretch and buster point release builds. But for
regular daily/weekly builds of testing/bullseye images, I'm going to
drop the MD5SUMS and SHA1SUMS files.

Shout now if you have a problem with that...

I am personally using your SHA256SUMS fron iso images to buid the Vagrant Boxes, so I care for those, IMHO dropping the less secure checksums for future images is find.

Emmanuel


Reply to: