AW: Hashes for apr downloads

2018-09-18 Thread Mario Brandt
IMHO, there is no benefit in having a sha512. If one does not trust a download mirror or the direct download from apache.org that person doesn't trust any source. Worst case scenario is than to do a svn co rather than downloading the tar ball file.

Re: Hashes for apr downloads

2018-09-18 Thread William A Rowe Jr
On Tue, Sep 18, 2018 at 8:21 AM Ruediger Pluem wrote: > > On 09/18/2018 02:52 PM, William A Rowe Jr wrote: > > Note that in moderation of annou...@apache.org annou...@apache.org>, I received the following response; > > > >> MD5 and SHA1 hashes have been deprecated for some time on download >

Re: Hashes for apr downloads

2018-09-18 Thread Ruediger Pluem
On 09/18/2018 02:52 PM, William A Rowe Jr wrote: > Note that in moderation of annou...@apache.org , > I received the following response; > >> MD5 and SHA1 hashes have been deprecated for some time on download pages (*) >> >> Please update the download page(s) to

Hashes for apr downloads

2018-09-18 Thread William A Rowe Jr
Note that in moderation of annou...@apache.org, I received the following response; > MD5 and SHA1 hashes have been deprecated for some time on download pages (*) > > Please update the download page(s) to remove these. > > (*) http://www.apache.org/dev/release-distribution#sigs-and-sums Are we