On Tue, Mar 14, 2017 at 01:22:16PM -0700, Alan Coopersmith wrote:
> On 03/14/17 01:13 PM, Peter Hutterer wrote:
> > Fedora is using that now and manually running md5sum instead of just peeking
> > at the announce email is boring.
> 
> Did you mean manually running sha512sum in that comment?

well, I did it the other way round, i.e. grab the tarball, run md5/sha*sum
on it, then compare with the announce email. but you're right, it's
confusing this way, i'll just shorten it to "Fedora is using that now".

> 
> >  MD5:  `$MD5SUM $tarball`
> >  SHA1: `$SHA1SUM $tarball`
> >  SHA256: `$SHA256SUM $tarball`
> > +SHA512: `$SHA512SUM $tarball`
> >  PGP:  https://${host_current}/${section_path}/${tarball}.sig
> 
> Instead of just increasing the list, is it time to pop md5sum off the
> top?  Does anyone still rely on md5?

RHEL does for example, but it doesn't have the churn to justify keeping it
in the release announce.

Cheers,
   Peter
_______________________________________________
[email protected]: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: https://lists.x.org/mailman/listinfo/xorg-devel

Reply via email to