Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #4817
| From | Paul Wise <pabs@debian.org> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Re: Debian SHA-1 deprecation |
| Date | 2016-05-19 03:30 +0200 |
| Message-ID | <rAkWJ-1pH-5@gated-at.bofh.it> (permalink) |
| References | <rA9HX-2GR-7@gated-at.bofh.it> <rAbqr-3On-61@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Wed, May 18, 2016 at 11:09 PM, Elmar Stellnberger wrote: > Besides these issues; has anyone ever thought of deprecating md5sum-s in > package headers and using sha256sums instead? That would be of great help > for tools like debsums or https://www.elstel.org/debcheckroot. AFAIK the md5sums in binary package files aren't intended to be a security feature. The package metadata already uses SHA-2. debcheckroot doesn't look like something that could ever do something useful, there are so many files in a Debian rootfs that are dynamically generated from package maintainer scripts rather shipping in the package itself. Run cruft-ng and you will see just how much. -- bye, pabs https://wiki.debian.org/PaulWise
Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Debian SHA-1 deprecation Daniel Pocock <daniel@pocock.pro> - 2016-05-18 15:30 +0200
Re: Debian SHA-1 deprecation Elmar Stellnberger <estellnb@gmail.com> - 2016-05-18 17:20 +0200
Re: Debian SHA-1 deprecation Paul Wise <pabs@debian.org> - 2016-05-19 03:30 +0200
Re: Debian SHA-1 deprecation Paul Wise <pabs@debian.org> - 2016-05-19 03:20 +0200
Re: Debian SHA-1 deprecation Daniel Pocock <daniel@pocock.pro> - 2016-05-19 09:40 +0200
csiph-web