Daniel Ruggeri

-------- Original Message --------
From: William A Rowe Jr <wr...@rowe-clan.net>
Sent: October 23, 2017 1:36:31 PM CDT
To: httpd <dev@httpd.apache.org>
Subject: Simplify download distribution directory by dropping sha1 hashes?

HTTPD team,

Since our downloads are to be authenticated by their .asc PGP
signatures, and the hashes simply serve as checksums, is it reasonable
to offer only MD5 and SHA256 at this point?

Anyone without SHA256 (rare, I'd expect) can use MD5 as the simplest
supported checksum. All others should apply the strongest hash



Reply via email to