Benjamin Peterson added the comment: If python.org can be MITMed, it doesn't matter how secure the hash is.
On Tue, Nov 8, 2016, at 11:17, Big Stone wrote: > > Big Stone added the comment: > > I fear GPG is not easy stuff for Windows users. > > I fear a bunch of people on this network can circomvent DNS and make > python.org points to the wrong place. > > sha-1 instead of md5 would have been an improvement. > > ---------- > > _______________________________________ > Python tracker <rep...@bugs.python.org> > <http://bugs.python.org/issue28555> > _______________________________________ ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue28555> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
