Rutherther <[email protected]> writes:

> The first release candidate for Guix 1.5.0 is now available for testing!

Yay!

> Unfortunately we didn't manage to obtain access to alpha.gnu.org in
> time, so the artefacts are now hosted on Rutherther's VPS and domain.

I would appreciate if they get onto alpha.gnu.org eventually, for
archival reasons.

> • SHA256 hashes

Would you consider adding SHA3-256 checksums to announcements too?

In gnulib, we recently modified 'announce-gen' (which produce
announcement templates for many GNU projects) to move from SHA1 & SHA256
to SHA256 & SHA3-256 and I think that choice is generally a good
precaution these days.  SHA256 suffer from the same traditional
Merkle-Damgard limitations shared by MD5 and SHA1, that SHA3-256 doesn't
have, and while there is no immediate problem with SHA256 an orderly
transition to SHA3-256 makes sense.

/Simon

Attachment: signature.asc
Description: PGP signature

Reply via email to