On Fri, Aug 2, 2013 at 3:29 PM, Guillem Jover wrote:

> Adding stronger hashes support seems in general like a good idea, but
> I've never quite understood the urge to remove weaker ones in case
> these get accumulated instead of replaced, as more hashes should also
> in general imply a harder time coming up with data that will produce
> all the same hashes.

The only argument to remove them would be that they take up space in
the apt metadata.

> In any case, removing md5 support seems like a bad idea to me right
> now, as older software might not have been adapted to check the other
> hashes, or would imply breaking the current .dsc and ,changes formats,
> as the Files field uses md5.

We've had SHA1 since before snapshot.d.o data started (2005), I would
guess any relevant software would have been updated in the last 8
years.

http://snapshot.debian.org/archive/debian/20050312T000000Z/dists/sid/Release

> It might be good to create a similar wiki page (to DebSupport) with
> the repository format support, so that we can get a better idea of the
> current status of the software around.

Agreed, created one here, minimal content though:

https://wiki.debian.org/RepositorySupport

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/caktje6fr1ikdx3ctueiduee1v1jogzsbha-00vdqzzw_zs1...@mail.gmail.com

Reply via email to