https://bz.apache.org/bugzilla/show_bug.cgi?id=62530

--- Comment #1 from Luca Toscano <[email protected]> ---
Hi,

when you say "deprecated" you mean generically or by the Apache foundation? It
is pretty clear in the documentation that the verification is done via PGP and
not MD5, but I agree with you that it might be confusing for people.

How about replacing the MD5 occurrences with MD5/SHA1/SHA256 ? Would it be a
good compromise?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to