We might need to update the release signing or release guide, in general, stating that we should not publish those anymore. The release signing slightly mentions that MD5 is weak, but AFAIK does not mention that it should not be published anymore.
Anyway, I will remove the MD5 when I publish the artifacts from staging to release if the RC is successful and update the release scripts (of various projects) to not generate MD5 anymore. On Sat, Apr 7, 2018 at 9:50 PM, Henk P. Penning <penn...@uu.nl> wrote: > On Sun, 8 Apr 2018, Luciano Resende wrote: > > Date: Sun, 8 Apr 2018 03:28:37 +0200 >> From: Luciano Resende <luckbr1...@gmail.com> >> To: "general@incubator.apache.org" <general@incubator.apache.org> >> Subject: [VOTE] Apache Toree 0.2.0-incubating (RC4) >> > > Hi, > > All distribution packages, including signatures, digests, etc. can be found >> at: >> >> https://dist.apache.org/repos/dist/dev/incubator/toree/0.2.0 >> -incubating-rc4/ >> > > please don't publish .md5 files anymore ; > your .sha512's are enough. > > Luciano Resende >> > > Groeten, > > HPP > > ------------------------------------------------------------ _ > Henk P. Penning, ICT-beta R Uithof MG-403 _/ \_ > Faculty of Science, Utrecht University T +31 30 253 4106 / \_/ \ > Leuvenlaan 4, 3584CE Utrecht, NL F +31 30 253 4553 \_/ \_/ > http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl \_/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > > -- Luciano Resende http://twitter.com/lresende1975 http://lresende.blogspot.com/
