MD5 no longer part of release process
| From: | Sara Golemon | Date: | Wed, 28 Jun 2017 02:19:29 +0000 |
| Subject: | MD5 no longer part of release process | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-99651@lists.php.net to get a copy of this message | ||
It was a nail-biter of a vote, but MD5 removal has passed 29 to 0 with
a secondary vote for immediate removal without deprecation of 29 to 1.
https://wiki.php.net/rfc/release-md5-deprecation
I've pushed two commits to remove MD5 from www.php.net and qa.php.net,
however it should be noted that I left a fair amount of md5 in web-php
because very old releases have neither GPG signatures nor SHA256
checksums, and while MD5 is weak and broken, it's better than nothing.
-Sara
https://github.com/php/web-php/commit/7018747e6f57316591f138614cf311901f76e844
https://github.com/php/web-qa/commit/808942b865e355f16c727dc2050c4ec9ef832f9a