Re: MD5 no longer part of release process
| From: | Niklas Keller | Date: | Wed, 28 Jun 2017 06:58:30 +0000 |
| Subject: | Re: MD5 no longer part of release process | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-99652@lists.php.net to get a copy of this message | ||
2017-06-28 4:19 GMT+02:00 Sara Golemon <pollita@php.net>:
> It was a nail-biter of a vote, but MD5 removal has passed 29 to 0 with
> a secondary vote for immediate removal without deprecation of 29 to 1.
> https://wiki.php.net/rfc/release-md5-deprecation
>
> I've pushed two commits to remove MD5 from www.php.net and qa.php.net,
> however it should be noted that I left a fair amount of md5 in web-php
> because very old releases have neither GPG signatures nor SHA256
> checksums, and while MD5 is weak and broken, it's better than nothing.
>
Can't we just rehash them?
Regards, Niklas