I'd prefer not to wait for INFRA-14923. Even Sonatype's Nexus only adds md5 and sha1 digests. These are generated by Nexus, as opposed to publisher's adding their own digest files. I have done some checking on maven central and in the cross section I checked, no jars had sha256 or sha512 digests.
We have complete control over what gets added to https://archive.apache.org/dist/poi/release/ and we can definitely use sha256 and sha512 digests there. -- Sent from: http://apache-poi.1045710.n5.nabble.com/POI-Dev-f2312866.html --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org
