On 10:18 am, [email protected] wrote: >Le 03/04/2013 23:55, Glyph a écrit : >> >>On Apr 3, 2013, at 9:14 AM, Thomas Hervé <[email protected]> wrote: >>>* Glyph mumbled something about sha sums of the release files, >>>instead >>>of md5. Should we pursue that? We may need to update some trac >>>integration code. >> >>We should. If we're signing them, it's for security. If it's for >>security, we should use a secure hash. Let's skip sha1 and go >>straight to sha512 or something. > >OK. I've opened http://pad.lv/1164403 for the required changes in our >tool. I'll update the release document once that's done.
Hm. As far as the download/release trac macro goes, the purpose of this to to generate links with md5 hashes for easy_install and similar tools. It should continue to operate with md5, not be switched to sha. And apparently this should be documented somewhere? Jean-Paul _______________________________________________ Twisted-Python mailing list [email protected] http://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python
