Re: [Gnu-arch-users] Re: MD5 is broken

[Peter Conrad]

Hi,

On Wed, Mar 16, 2005 at 12:26:30PM +0600, Ivan Boldyrev wrote:
> 
> Tom Lord merges sexy patch.  Even if he will re-sign patch,
> MD5 sum in ./checksum will be same because *.patches.tar.gz is same.

this is wrong. If Tom merges your patch, he will automatically create
additional log entries in his own branch. This (among other things, like
changed timestamps) will lead to a file with a different MD5 sum.

> Arch is already in trouble
> because Arch developers do not understand security.

Claims like this one are not helpful in getting your point across.

Bye,
        Peter
-- 
Peter Conrad                        Tel: +49 6102 / 80 99 072
[ t]ivano Software GmbH             Fax: +49 6102 / 80 99 071
Bahnhofstr. 18                      http://www.tivano.de/
63263 Neu-Isenburg

Germany