[
https://issues.apache.org/jira/browse/MINDEXER-130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17965362#comment-17965362
]
Olivier Lamy commented on MINDEXER-130:
---------------------------------------
This project has moved from Jira to GitHub Issues. This issue was migrated to
[apache/maven-indexer#682|https://github.com/apache/maven-indexer/issues/682].
Please visit the GitHub issue to view further activity, add comments, or
subscribe to receive notifications.
> produce sha256 hashes for index files
> -------------------------------------
>
> Key: MINDEXER-130
> URL: https://issues.apache.org/jira/browse/MINDEXER-130
> Project: Maven Indexer (Moved to GitHub Issues)
> Issue Type: Bug
> Reporter: Jeff Hodges
> Priority: Major
>
> (If this is the wrong project, sorry.)
> It'd be nice if the index files produced and published included SHA256 hashes
> on top of the currently available SHA1 files.
> I'm looking at https://repo1.maven.org/maven2/.index/ and seeing only SHA1
> files produced, for instance.
> SHA1 is no longer secure and various interfaces that give you SHA1 files
> (like Guava's Hashing API) will toss up deprecation notices.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
