Re: [RFC][Release Process] Deprecate/Remove MD5 checksums
| From: | Sara Golemon | Date: | Tue, 06 Jun 2017 12:56:45 +0000 |
| Subject: | Re: [RFC][Release Process] Deprecate/Remove MD5 checksums | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-99399@lists.php.net to get a copy of this message | ||
On Tue, Jun 6, 2017 at 12:52 AM, Remi Collet <remi@fedoraproject.org> wrote:
> Le 30/05/2017 à 06:27, Sara Golemon a écrit :
>> https://wiki.php.net/rfc/release-md5-deprecation
>>
>> Primary discussion points: Deprecate or Remove? Deprecate for how long?
>>
>
> +1 for dropping md5 checksums for 7.2 releases
>
> And I don't think adding sha256 for old releases (which are unsecure)
> worth the work.
>
Too late: https://github.com/php/web-php/commit/c9224979fe2c56cda84cca664b7eed34df79e16d
I also added a few more commits to account for some places where we're
assuming an md5 checksum will be present.
-Sara