https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7621
--- Comment #3 from Kevin A. McGrail <kmcgr...@apache.org> --- Agreed but the combination of both is a stance we decided on in 2004 and has served us well. Changing what our project does to accommodate a third party when the fix is a simple creation of a sha256 file is my point. -- You are receiving this mail because: You are the assignee for the bug.