Kevin A. McGrail wrote on 14/04/21 12:22 am:
BTW, did we actually turn off the sha-1 signature generation? I think
that was when David and the pandemic hit...
You are right. http://sa-update.spamassassin.org/1888609.tar.gz.sha1 exists.
But now that it has been officially announced that we no
We should also update the zone file to static for the older versions too so
they never try and get a newer update.
On Tue, Apr 13, 2021, 21:08 Sidney Markowitz wrote:
> Kevin A. McGrail wrote on 14/04/21 12:22 am:
> > BTW, did we actually turn off the sha-1 signature generation? I think
> > tha
Yeah, I found what happened. On 3/2 I called for a vote. Then the
pandemic hit and I drafted but did not send an email suggested we wait a
few months.
Here's my notes on it:
*** On March 1, 2020, we will stop publishing rulesets with SHA-1 checksums.
If you do not update to 3.4.2 or lat
Kevin A. McGrail wrote on 15/04/21 2:08 am:
Want me to look into it again?
I think it's the right thing to do. If you think it requires another
vote to proceed, feel free to call one, but my opinion is that it is a
settled issue and we can just go ahead with it.
Sidney
