tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Add SHA512 digests to package metadata

On Mon, Oct 19, 2015 at 11:29:48AM -0700, Alistair Crooks wrote:
> Right now, we use MD5 sums only to verify that individual files in
> package metadata have not been modified. Whilst this is not the end of
> the world, it needs to be fixed. It also needs to be fixed fairly
> sharpish. Diffs at:

Please don't duplicate the SHA2 code from libnbcompat. I'd prefer to
stop the abuse of @comment for this as well, but that does require a
tools bump.


Home | Main Index | Thread Index | Old Index