https://bz.apache.org/bugzilla/show_bug.cgi?id=55808

Luca Toscano <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WONTFIX
             Status|NEW                         |RESOLVED

--- Comment #2 from Luca Toscano <[email protected]> ---
I followed up with the httpd-dev IRC channel and sent an email to docs@, the
general feeling is summarised in the following answer:

"""
MD5 and SHA1 still have use cases. You can still use them to check easily that
your download is complete and wasn't
corrupted by any accidental network foo. Of course they are not save for
verifying that no one tampered the downloads on
purpose. This is what the PGP signature is for.
"""

For the moment I am inclined to close this bug as won't fix, please re-open it
if you need further follow ups :)

Thanks!

Luca

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to