[jira] [Created] (TINKERPOP-1912) Remove MD5 checksums

["Daniel Kuppitz (JIRA)" <ji...@apache.org>]

Daniel Kuppitz created TINKERPOP-1912:
-----------------------------------------

             Summary: Remove MD5 checksums
                 Key: TINKERPOP-1912
                 URL: https://issues.apache.org/jira/browse/TINKERPOP-1912
             Project: TinkerPop
          Issue Type: Improvement
          Components: build-release
            Reporter: Daniel Kuppitz
            Assignee: Daniel Kuppitz


Apache is asking to remove MD5 checksums from releases.

*Old policy:*
 * MUST provide a MD5-file
 * SHOULD provide a SHA-file [SHA-512 recommended]

*New policy:*
 * MUST provide a SHA- or MD5-file
 * SHOULD provide a SHA-file
 * SHOULD NOT provide a MD5-file

Providing MD5 checksum files is now discouraged for new releases, but still allowed for past releases.

*Why this change:*
 * MD5 is broken for many purposes ; we should move away from it.
[https://en.wikipedia.org/wiki/MD5#Overview_of_security_issues]

*Impact for PMCs:*
 * _*for new releases:*_
 ** please do provide a SHA-file (one or more, if you like)
 ** do NOT provide a MD5-file



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)