On Thu, Mar 04, 2010 at 01:12:26AM +0900, Osamu Aoki wrote: > > > In this day and age of completely and utterly broken MD5[0], I think we > > should stop providing these files, and maybe provide something else > > instead. Like, I dunno, shasums? Or perhaps gpgsigs? But stop providing > > md5sums. > > gpg is slow. sha variants will be nice if there is smooth transition in > place properly planned and supprted with backported package of debsums.
You wouldn't sign each file, just the hash sums file. harry -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20100303175954.gd11...@nn.nn
