Ah ? really ?
1/ I am one of the guys who talks about security here. I am not the first
one.SHA1 was one of the discuss...
2/ I am one of the first guy who give many examples of good way to use a
specific hash algorithm... (when you use command line)
If honesty occur here, kudos should go to us not to DRH.
Just to mention that the explanation given (SHA1) is known for a long time :
there is an issue with SHA1.
The Fossil Team, or whatever you may call it, did just what every software team
should do : give appropriate explanations about the policy that should or may
occur [around the SHA1 issue].
3/ To let you understand my point :I was astonished that finally the Fossil 2.0
is not SHA3, but it sticks with SHA1.You should ask/demand an SHA3 if you want
it to run with your Fossil 2.0. Say : command line such as fossil new sha3 ...
[or something like that]
In another word, Fossil 2.0 which is supposed to be considered as a MAJOR
release, did not make the change ...
People should see a new release such as 1.37.1 (with the new SHA1 algo) but
this will NEVER happen.
People should expect that the 2.0 is SHA3 with SHA1 as an option if needed...
4/ I suppose that the Fossil Team knows nothing about ergonomics, too ?(Poor of
me)
Best Regards
K.
De : Lonnie Abelbeck <[email protected]>
À : Fossil SCM user's discussion <[email protected]>
Envoyé le : Dimanche 5 mars 2017 23h31
Objet : Re: [fossil-users] Fossil 2.1 beta. Was: Progress report of Fossil 2.x
On Mar 5, 2017, at 5:01 PM, Richard Hipp <[email protected]> wrote:
> The big change is that now Fossil will actually generate SHA3-256
> hashes for new artifacts, if you ask it to, or by default in new
> repositories. See
> https://www.fossil-scm.org/fossil/doc/trunk/www/hashpolicy.wiki for
> details.
Kudos to Richard, the Fossil team and all that contributed ideas for this
Fossil "Hash Policy". It appears every corner-case is covered.
Lonnie
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
