[Twisted-Python] Release questions

exarkun at twistedmatrix.com exarkun at twistedmatrix.com
Thu Apr 4 07:14:32 EDT 2013


On 10:18 am, therve at free.fr wrote:
>Le 03/04/2013 23:55, Glyph a écrit :
>>
>>On Apr 3, 2013, at 9:14 AM, Thomas Hervé <therve at free.fr> wrote:
>>>* Glyph mumbled something about sha sums of the release files, 
>>>instead
>>>of md5. Should we pursue that? We may need to update some trac
>>>integration code.
>>
>>We should.  If we're signing them, it's for security.  If it's for 
>>security, we should use a secure hash.  Let's skip sha1 and go 
>>straight to sha512 or something.
>
>OK. I've opened http://pad.lv/1164403 for the required changes in our
>tool. I'll update the release document once that's done.

Hm.  As far as the download/release trac macro goes, the purpose of this 
to to generate links with md5 hashes for easy_install and similar tools. 
It should continue to operate with md5, not be switched to sha.

And apparently this should be documented somewhere?

Jean-Paul



More information about the Twisted-Python mailing list