Re: FTP packages missing CHECKSUM.MD5

2013-04-12 Thread Lowell Gilbert
grarpamp writes: > Noticed that at least ports/i386/packages-9-stable is missing > its CHECKSUM.MD5 file. > > Of course people shouldn't use it for what they think it's for, > because it's not signed and uses a broken hash function. > Hopefully that will be updated to signed sha1/256/3 before lon

Re: FTP packages missing CHECKSUM.MD5

2013-04-11 Thread Martin Wilke
Hey, Thanks for your report I will take care of that. On Apr 12, 2013, at 2:15 AM, grarpamp wrote: > Noticed that at least ports/i386/packages-9-stable is missing > its CHECKSUM.MD5 file. > > Of course people shouldn't use it for what they think it's for, > because it's not signed and uses a b

FTP packages missing CHECKSUM.MD5

2013-04-11 Thread grarpamp
Noticed that at least ports/i386/packages-9-stable is missing its CHECKSUM.MD5 file. Of course people shouldn't use it for what they think it's for, because it's not signed and uses a broken hash function. Hopefully that will be updated to signed sha1/256/3 before long. However it does make for a