Re: apt-get update hashsum mismatch prevent

[Ansgar Burchardt <ansgar@debian.org>]

Hi,

Michael Vogt <mvo@debian.org> writes:
> - we add a flag to InRelease like "Content-Addressable-Indexes: yes"
>   "Get-By-Hash: sha256,sha1" (suggestions for a good name welcome) [2]

> [2] Either going with a simple boolean flag in which case the hashes
>     need to be provided for all hashes in the Release file (e.g.
>     via symlinks) or by using specific hashes mentioned in the 
>     Release file. I lean towards just using a boolean as its
>     the simplest solution.

I think the field should say which hash to use. There is no need for the
archive to have to provide the files under all possible hash names (or
apt/debmirror/* to probe which files actually exist).

Ansgar