The nightly builds have been SHA-512 since Feb 12, so yes 0.9.2 will be SHA-512 instead of MD5. This is just more FUD from Justin.
-Alex On 3/2/18, 8:20 AM, "Dave Fisher" <[email protected]> wrote: >Hi Justin, > ><snip> > >> Also not everyone may be aware are some new considerations around >>hashes for releases. [2] But it is easily to comply, compared to the >>last release you would need to add a SHA hash file or replace the >>existing MD5 file with a SHA file. > >(a) Alex is aware. >(b) The policy just officially changed this week. I don’t think that >instant compliance is expected. Henk is watching - everyone can look here >to see how all the projects stack up. [1] > >Alex - are you waiting for the next release to make the SHA changes? > >Regards, >Dave > ><snip> > >[1] http://checker.apache.org > >> 2. https://www.apache.org/dev/release-distribution#sigs-and-sums >
