Re: Should fedora-review deprecate SHA-1?

2017-03-08 Thread Sérgio Basto
On Qua, 2017-03-08 at 22:26 -0500, Christopher Meng wrote: > On 3/8/17, Adam Williamson wrote: > > > > What do you mean by 'using SHA-1' and 'drop SHA-1', exactly? You're > > not > > giving enough context. Not all uses of hashing algorithms have > > security > > consequences. > > Checksum. > >

Re: Should fedora-review deprecate SHA-1?

2017-03-08 Thread Christopher Meng
On 3/8/17, Adam Williamson wrote: > What do you mean by 'using SHA-1' and 'drop SHA-1', exactly? You're not > giving enough context. Not all uses of hashing algorithms have security > consequences. Checksum. fedora-review -k. -- Yours sincerely, Christopher Meng http://awk.io

Re: Should fedora-review deprecate SHA-1?

2017-03-08 Thread Adam Williamson
On Wed, 2017-03-08 at 21:48 -0500, Christopher Meng wrote: > Hi list, > > Per some old news[1], I believe SHA-1 is not secure anymore. But after > checking fedora-review(1), I still see possibility of using SHA-1. > > Is it the time to drop SHA-1? What do you mean by 'using SHA-1' and 'drop SHA-

Should fedora-review deprecate SHA-1?

2017-03-08 Thread Christopher Meng
Hi list, Per some old news[1], I believe SHA-1 is not secure anymore. But after checking fedora-review(1), I still see possibility of using SHA-1. Is it the time to drop SHA-1? Thanks. [1]---http://shattered.io -- Yours sincerely, Christopher Meng _