[Distutils] Proposal: drop md5 for sha256

Donald Stufft donald.stufft at gmail.com
Tue Jul 3 18:09:56 CEST 2012


On Tuesday, July 3, 2012 at 11:57 AM, Jeroen Dekkers wrote:
> Sorry for not being clear, but I totally agree. I was replying to the
> md5 on PyPI are embarrassing part and meant that we should migrate to
> use better hashes on PyPI in the future.
> 
> 

Off topic for this list, but I would agree, and have attempted to have this
happen but have been told that those hashes are not for security but only
for a checksum and will not be changed.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20120703/1c2e0331/attachment.html>


More information about the Distutils-SIG mailing list