Re: Debian SHA-1 deprecation

From	Daniel Pocock <daniel@pocock.pro>
Newsgroups	linux.debian.security
Subject	Re: Debian SHA-1 deprecation
Date	2016-05-19 09:40 +0200
Message-ID	<rAqIN-5bD-11@gated-at.bofh.it> (permalink)
References	<rA9HX-2GR-7@gated-at.bofh.it> <rAkN3-1lh-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 19/05/16 03:17, Paul Wise wrote:
> On Wed, May 18, 2016 at 9:20 PM, Daniel Pocock wrote:
> 
>> Can anybody comment on how Debian users will be impacted by SHA-1
>> deprecation?
> 
> There is some info related to that in these two wiki pages:
> 
> https://wiki.debian.org/SHA-1

The way that page is structured today, it mixes things about how SHA-1
is used in Debian infrastructure (e.g. for the SPI CA) and how it is
used in some of the software we distributed (e.g. in Git)

Maybe we need to break it into separate sections:
- SHA-1 in Debian infrastructure and workflows
- SHA-1 in Debian packages

Are there any useful discussions about the deprecation of MD-5 that we
could link to, to give people an understanding of how things will change
or how they should change?

> https://wiki.debian.org/Teams/Apt/Sha1Removal
>

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Debian SHA-1 deprecation Daniel Pocock <daniel@pocock.pro> - 2016-05-18 15:30 +0200
  Re: Debian SHA-1 deprecation Elmar Stellnberger <estellnb@gmail.com> - 2016-05-18 17:20 +0200
    Re: Debian SHA-1 deprecation Paul Wise <pabs@debian.org> - 2016-05-19 03:30 +0200
  Re: Debian SHA-1 deprecation Paul Wise <pabs@debian.org> - 2016-05-19 03:20 +0200
    Re: Debian SHA-1 deprecation Daniel Pocock <daniel@pocock.pro> - 2016-05-19 09:40 +0200

csiph-web