Re: Let's avoid using md5 as checksum

William Allen Simpson wrote:

On 2/15/08, Eric Hall <opendarwin.org@darkart.com> wrote: And that is the only relevant issue. Something that a hash cannot solve.

As long as we ONLY use hashes generated by the distfile author, located on the distfile site, and NEVER generate our own, we'll be fine.

We should be fine if they PGP sign the file and then we get the hashes from that? Blair -- Blair Zajac, Ph.D. CTO, OrcaWare Technologies <blair@orcaware.com> Subversion training, consulting and support http://www.orcaware.com/svn/