On 3/17/20 1:39 PM, jean-frederic clere wrote: > Hi, > > Are we planing to add sha512 in our release? > vcpkg (https://github.com/microsoft/vcpkg) for example uses sha512 to check > the files it downloads. I think we should go that way even if it's not mandatory: "For new releases, PMCs MUST supply SHA-256 and/or SHA-512" (https://www.apache.org/dev/release-distribution#sigs-and-sums).
Giovanni
