> I'm currently unsubscribed to -policy - I should be resubscribing soon,
> when my free time increases to that amount needed to follow policy. So
> apologies if this has been covered before...
>
> Doesn't an md5sums file need to have file lengths to work? I
> understoood that there were known algorithms to produce a new file with
> a given md5sum, if you can vary the length of the file?
Just a brief note about the thread there: if md5sums are included in
packages, they will *only* be included for system integrity checks.
They serve *no* useful security purpose. Given this, the MD5 sums
themselves should be adequate for the integrity tests.
Julian
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Julian Gilbey, Dept of Maths, QMW, Univ. of London. [EMAIL PROTECTED]
Debian GNU/Linux Developer, see http://www.debian.org/~jdg
