Hello,

http://www.us.apache.org/dist/lucene/solr/4.7.2/ uses .sha1 suffix and it looks 
like uses SHA1.

According to http://www.apache.org/dev/release-signing.html#basic-facts 
* An SHA checksum should also be created and must be suffixed .sha

* SHA-1 should be avoided


Is this something overlooked?

Ahmet

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to