Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:99387 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 67009 invoked from network); 6 Jun 2017 04:52:33 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Jun 2017 04:52:33 -0000 Authentication-Results: pb1.pair.com smtp.mail=remi@fedoraproject.org; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=remi@fedoraproject.org; sender-id=unknown Received-SPF: error (pb1.pair.com: domain fedoraproject.org from 217.70.183.194 cause and error) X-PHP-List-Original-Sender: remi@fedoraproject.org X-Host-Fingerprint: 217.70.183.194 relay2-d.mail.gandi.net Received: from [217.70.183.194] ([217.70.183.194:59096] helo=relay2-d.mail.gandi.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id D5/1A-27119-E0536395 for ; Tue, 06 Jun 2017 00:52:31 -0400 Received: from mfilter16-d.gandi.net (mfilter16-d.gandi.net [217.70.178.144]) by relay2-d.mail.gandi.net (Postfix) with ESMTP id EED63C5A60 for ; Tue, 6 Jun 2017 06:52:27 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter16-d.gandi.net Received: from relay2-d.mail.gandi.net ([IPv6:::ffff:217.70.183.194]) by mfilter16-d.gandi.net (mfilter16-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id KfVWI5xyIzdA for ; Tue, 6 Jun 2017 06:52:26 +0200 (CEST) X-Originating-IP: 90.109.100.243 Received: from builder.remirepo.net (LFbn-1-6148-243.w90-109.abo.wanadoo.fr [90.109.100.243]) (Authenticated sender: contact@ll-experts.com) by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id 2E078C5A43 for ; Tue, 6 Jun 2017 06:52:25 +0200 (CEST) To: internals@lists.php.net References: Message-ID: <308f6656-ecab-a5ea-f182-73b4046a25a1@fedoraproject.org> Date: Tue, 6 Jun 2017 06:52:21 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="hJjflcFaNBw91nOtjDQgRJtBb3Rwm4D55" Subject: Re: [PHP-DEV] [RFC][Release Process] Deprecate/Remove MD5 checksums From: remi@fedoraproject.org (Remi Collet) --hJjflcFaNBw91nOtjDQgRJtBb3Rwm4D55 Content-Type: multipart/mixed; boundary="VijOrcgurIqhADROGkh3MeI7HEcHfJWwn"; protected-headers="v1" From: Remi Collet To: internals@lists.php.net Message-ID: <308f6656-ecab-a5ea-f182-73b4046a25a1@fedoraproject.org> Subject: Re: [PHP-DEV] [RFC][Release Process] Deprecate/Remove MD5 checksums References: In-Reply-To: --VijOrcgurIqhADROGkh3MeI7HEcHfJWwn Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Le 30/05/2017 =C3=A0 06:27, Sara Golemon a =C3=A9crit : > https://wiki.php.net/rfc/release-md5-deprecation >=20 > Primary discussion points: Deprecate or Remove? Deprecate for how long?= >=20 +1 for dropping md5 checksums for 7.2 releases And I don't think adding sha256 for old releases (which are unsecure) worth the work. Remi. --VijOrcgurIqhADROGkh3MeI7HEcHfJWwn-- --hJjflcFaNBw91nOtjDQgRJtBb3Rwm4D55 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlk2NQkACgkQYUppBSnxahhotwCg6XmPMS08R8iqmhmOx3I4FN2h bnwAoNXvTim6LUJ3Yhg+MTtoQt2olp2v =Kp8e -----END PGP SIGNATURE----- --hJjflcFaNBw91nOtjDQgRJtBb3Rwm4D55--