Re: Time to replace MD5?
On Tue, Jun 12, 2007 at 07:39:38PM -0400, Joey Hess wrote:
> Bernd Eckenfels wrote:
> > Because open source is all about choice.
> So it's there because of a platitude?
> > There might be admins using dpkg -i
> > or security officers who build their local mirrors manually.
> Then why don't we include md5sums and wget commands for all packages in
> stable point release annoucements? Why not include them in major release
> announcements too? Or are these things somehow less "all about choice"?
Yes, there are a lot of us who use dpkg -i, and do it
very often. I may be missing something in this thread
because it seems to blatently obvious to me that this
is a necessary and important tool that I am having
difficulty understanding where this is going.