[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-dev
Subject:    Re: [gentoo-dev] Notification about MD5 support
From:       Vlastimil Babka <caster () gentoo ! org>
Date:       2006-09-22 23:02:09
Message-ID: 45146B71.1070705 () gentoo ! org
[Download RAW message or body]

Chris White wrote:
> Well, the problem that occurs here is the verification process.  With MD5, you 
> can hit most upstream sites, and they'll have an MD5SUM avaliable that you 
> can authenticate against.

Well if you care enough to verify this, you can easily create an md5sum 
of the fetched distfile yourself, and compare that with upstream :)
Of course, if you want to verify digests of random packages without 
wanting to actually download and use them, then you would miss MD5 in 
the manifest, but how likely is that?

-- 
Vlastimil Babka (Caster)
Gentoo/Java
-- 
gentoo-dev@gentoo.org mailing list

[prev in list] [next in list] [prev in thread] [next in thread]