10 May
2018
10 May
'18
6:03 a.m.
Op do 10 mei 2018 01:26 schreef Leonid Isaev via arch-general < arch-general@archlinux.org>:
On Wed, May 09, 2018 at 09:30:51PM +0200, Neven Sajko wrote:
I would just like to note that SHA-2 hashes are inferior to Keccak and to BLAKE2. So better not to spend effort migrating to SHA-2.
Strength of various SHA hashes is a different topic. My only point was that relying on md5 these days is like having no hashes at all or using the source filename as a hash...
Which is (still) pretty much the point of these hashes. With pacman these are *not* very important. The hashes are there for a quick check if the download is complete. Integrity is a job for PGP. Mvg, Guus Snijders