Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:99652
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.221 cause and error)
MIME-Version: 1.0
In-Reply-To: <CAESVnVpOzfGMunLd2Wb1hN=6Os-mr5garDkBgb=5kZYFgtXWfA@mail.gmail.com>
References: <CAESVnVpOzfGMunLd2Wb1hN=6Os-mr5garDkBgb=5kZYFgtXWfA@mail.gmail.com>
Date: Wed, 28 Jun 2017 08:58:30 +0200
Message-ID: <CANUQDCjiWTaWcvmAAEymqW2VRPAHEGHpjmgYV0C9LPNq=oGt9Q@mail.gmail.com>
To: Sara Golemon <pollita@php.net>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="001a1134f5a838c7dc0552ffb695"
Subject: Re: [PHP-DEV] MD5 no longer part of release process
From: me@kelunik.com (Niklas Keller)

--001a1134f5a838c7dc0552ffb695
Content-Type: text/plain; charset="UTF-8"

2017-06-28 4:19 GMT+02:00 Sara Golemon <pollita@php.net>:

> It was a nail-biter of a vote, but MD5 removal has passed 29 to 0 with
> a secondary vote for immediate removal without deprecation of 29 to 1.
> https://wiki.php.net/rfc/release-md5-deprecation
>
> I've pushed two commits to remove MD5 from www.php.net and qa.php.net,
> however it should be noted that I left a fair amount of md5 in web-php
> because very old releases have neither GPG signatures nor SHA256
> checksums, and while MD5 is weak and broken, it's better than nothing.
>

Can't we just rehash them?

Regards, Niklas

--001a1134f5a838c7dc0552ffb695--