On Fri, Dec 07, 2018 at 02:06:50PM +0100, Fabiano Fidêncio wrote: > Paul, > > > http://ftp.debian.org/debian/dists/stretch/main/installer-amd64/current/images/SHA256SUMS > > This one could be used if we'd have the "Description" entry as we do > in http://ftp.debian.org/debian/dists/stretch/Release > Do you think that adding the "Description" entry to the > current/images/SHA256SUMS file would be easier/more secure than adding > the ".treeinfo" file under > http://ftp.debian.org/debian/dists/stretch/main/installer-amd64/ ?
The SHA256SUMS file is expected to be valid input to "sha256sum -c", so any extra metadata would have to live somewhere else. -- Colin Watson [cjwat...@debian.org]
