From:             kelunik
Operating system: 
PHP version:      Irrelevant
Package:          Website problem
Bug Type:         Feature/Change Request
Bug description:Release API shouldn't provide MD5 hashes

Description:
------------
http://php.net/releases/?json&max=2000&version=7 shouldn't provide MD5
hashes for file integrity. MD5 is broken and can no longer be seen as
collision-resistant.

I hereby propose to remove those hashes. Any tool that relies on the API
and its MD5 hashes SHOULD break and be upgraded. We can announce it
before doing the change, but we can't warn on such usage
programmatically.

We already have SHA-256 there, which is fine. We should also add the PGP
signatures we provide in the announcement e-mails.


-- 
Edit bug report at https://bugs.php.net/bug.php?id=74259&edit=1
-- 
Try a snapshot (PHP 5.4):   
https://bugs.php.net/fix.php?id=74259&r=trysnapshot54
Try a snapshot (PHP 5.5):   
https://bugs.php.net/fix.php?id=74259&r=trysnapshot55
Try a snapshot (trunk):     
https://bugs.php.net/fix.php?id=74259&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=74259&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=74259&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=74259&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=74259&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=74259&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=74259&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=74259&r=notwrong
Not enough info:            
https://bugs.php.net/fix.php?id=74259&r=notenoughinfo
Submitted twice:            
https://bugs.php.net/fix.php?id=74259&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=74259&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=74259&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=74259&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=74259&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=74259&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=74259&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=74259&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=74259&r=mysqlcfg


-- 
PHP Webmaster List Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to