[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
MD5sums in release announcements (was Re: Stable CVS Version 1.11.17 Rel
From: |
Max Bowsher |
Subject: |
MD5sums in release announcements (was Re: Stable CVS Version 1.11.17 Released! <strong>(security update)</strong>) |
Date: |
Wed, 9 Jun 2004 19:37:44 +0100 |
Derek Robert Price wrote:
> I am no longer including MD5 sums in the release announcements since I
> am now posting a detached GPG signature file with the downloads.
Let's hope it never happens again, but, during the recent cvshome.org outage,
the md5sums in the release announcements were
*extremely* useful.
The release announcement emails had been independently archived by several
different mail archives, thereby providing a reliable
source of the true md5sum. When people began to put up their downloaded cvs
tarballs on various sites, this md5sum was extremely
valuable in verifying that these second-hand tarballs were truly the real
release.
If it doesn't create too much work for you, perhaps you could reconsider this
decision?
Max.
MD5sums in release announcements (was Re: Stable CVS Version 1.11.17 Released! <strong>(security update)</strong>),
Max Bowsher <=