Em janeiro 22, 2020 23:30 Eli Schwartz escreveu:
So ultimately that is what this discussion will always devolve to:- Do we want to ensure TOFU?
Yes.
- Do we want to give PKGBUILDs the default black mark "uses md5sums because maintainer doesn't care about researching sources"?
No. Encouraging best packaging practices can and should be done right from the start. This discussion is pointless though. Let's continue to use md5sums until it's completely broken, then we can switch to something else. Regards, Giancarlo Razzolini
pgp0Wx06i1VHj.pgp
Description: PGP signature
