On Thu, Feb 23, 2017 at 04:06:25PM +0100, Marc Espie wrote:
> On Thu, Feb 23, 2017 at 03:44:13PM +0100, minek van wrote:
> > fyi, 
> > 
> > https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
> > https://shattered.it/
> 
> Talking from the ports side, ports and packages moved to SHA256 
> back in 2007/2008.
> 
> Ports distinfo made it the only default in 2007, and pkg tools moved straight
> from md5 to sha1.
sha256, thinko.

Reply via email to