[Twisted-Python] Release questions
exarkun at twistedmatrix.com
exarkun at twistedmatrix.com
Thu Apr 4 07:14:32 EDT 2013
On 10:18 am, therve at free.fr wrote:
>Le 03/04/2013 23:55, Glyph a écrit :
>>
>>On Apr 3, 2013, at 9:14 AM, Thomas Hervé <therve at free.fr> wrote:
>>>* Glyph mumbled something about sha sums of the release files,
>>>instead
>>>of md5. Should we pursue that? We may need to update some trac
>>>integration code.
>>
>>We should. If we're signing them, it's for security. If it's for
>>security, we should use a secure hash. Let's skip sha1 and go
>>straight to sha512 or something.
>
>OK. I've opened http://pad.lv/1164403 for the required changes in our
>tool. I'll update the release document once that's done.
Hm. As far as the download/release trac macro goes, the purpose of this
to to generate links with md5 hashes for easy_install and similar tools.
It should continue to operate with md5, not be switched to sha.
And apparently this should be documented somewhere?
Jean-Paul
More information about the Twisted-Python
mailing list