Re: Bug#942893: ftp.debian.org: please drop MD5sum lines from Packages

2019-10-23 Thread Daniel Kahn Gillmor
On Wed 2019-10-23 16:39:24 +0100, Steve McIntyre wrote: > On Tue, Oct 22, 2019 at 11:51:56PM +0200, Ansgar wrote: >> - writing MD5sum in a separate file only used by debian-cd (if present, >> otherwise debian-cd should fall back to using Packages), or Sounds like this is the only option availabl

Re: Bug#942893: ftp.debian.org: please drop MD5sum lines from Packages

2019-10-24 Thread Daniel Kahn Gillmor
On Thu 2019-10-24 11:16:10 +0100, Steve McIntyre wrote: > The vast majority of the usage of MD5 here is for (essentially) > content-addressable storage. Given the context (with a checksum over > the whole image too), this is not such a critical failing. Is the final checksum over the whole image a

Re: Bug#942893: ftp.debian.org: please drop MD5sum lines from Packages

2019-10-24 Thread Daniel Kahn Gillmor
On Thu 2019-10-24 09:10:50 +0200, Bastian Blank wrote: > Hi Ansgar > > On Tue, Oct 22, 2019 at 11:51:56PM +0200, Ansgar wrote: >> We could look into either >> - writing MD5sum in a separate file only used by debian-cd (if present, >>otherwise debian-cd should fall back to using Packages), or >