info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

MD5sums in release announcements (was Re: Stable CVS Version 1.11.17 Rel


From: Max Bowsher
Subject: MD5sums in release announcements (was Re: Stable CVS Version 1.11.17 Released! <strong>(security update)</strong>)
Date: Wed, 9 Jun 2004 19:37:44 +0100

Derek Robert Price wrote:
> I am no longer including MD5 sums in the release announcements since I
> am now posting a detached GPG signature file with the downloads.

Let's hope it never happens again, but, during the recent cvshome.org outage, 
the md5sums in the release announcements were
*extremely* useful.

The release announcement emails had been independently archived by several 
different mail archives, thereby providing a reliable
source of the true md5sum. When people began to put up their downloaded cvs 
tarballs on various sites, this md5sum was extremely
valuable in verifying that these second-hand tarballs were truly the real 
release.

If it doesn't create too much work for you, perhaps you could reconsider this 
decision?


Max.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]