You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Bertrand Delacretaz (Jira)" <ji...@apache.org> on 2020/01/24 08:24:00 UTC

[jira] [Commented] (SLING-7534) Release policy - stop providing MD5 and start providing SHA-512 signatures

    [ https://issues.apache.org/jira/browse/SLING-7534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17022758#comment-17022758 ] 

Bertrand Delacretaz commented on SLING-7534:
--------------------------------------------

FWIW, The JSPWiki project has a setup that allows them to publish SHA-512 digests, see 

https://lists.apache.org/thread.html/r8cf8cb87f43569fa5578497f8fba64da0298677aad1cfd279ffc0c37%40%3Cgeneral.incubator.apache.org%3E

> Release policy - stop providing MD5 and start providing SHA-512 signatures
> --------------------------------------------------------------------------
>
>                 Key: SLING-7534
>                 URL: https://issues.apache.org/jira/browse/SLING-7534
>             Project: Sling
>          Issue Type: Task
>          Components: Tooling
>            Reporter: Robert Munteanu
>            Priority: Major
>             Fix For: Parent 37
>
>
> See http://www.apache.org/dev/release-distribution#sigs-and-sums , we SHOULD no longer provide MD5 checksums for new releases.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)