Don Armstrong <d...@debian.org> writes:
> On Wed, 03 Mar 2010, Wouter Verhelst wrote:

>> In this day and age of completely and utterly broken MD5[0], I think we
>> should stop providing these files, and maybe provide something else
>> instead.  Like, I dunno, shasums? Or perhaps gpgsigs? But stop
>> providing md5sums.

> Is there any reason why we can't just modify dpkg-deb to create
> DEBIAN/md5sums and DEBIAN/sha512sums and get archive coverage relatively
> quickly, automatically, as things get rebuilt?

Figuring out a better solution for why the files in /var/lib/ispell and
/var/lib/aspell are excluded from the md5sums generation because they
change after installation is probably needed if we're going to remove
creation of those files from control of the packager.

-- 
Russ Allbery (r...@debian.org)               <http://www.eyrie.org/~eagle/>


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87fx4ek0wt....@windlord.stanford.edu

Reply via email to