I don't think we have plans to start signing installers. The code that creates installers is in the `distro-build` package, and the use of sha1 is here: https://github.com/racket/distro-build/blob/21ccc39fc14408eea79aff035e508856a66adf89/distro-build-server/pack-built.rkt#L76
Sam On Thu, Apr 1, 2021 at 12:39 PM Sage Gerard <[email protected]> wrote: > > Are there any plans to publish GPG signatures for Racket installers, or > at least upgrade the cryptographic hash function used for the checksums? > > If not, who would be a good person to talk to about contributing that? > > -- > ~slg > > > -- > You received this message because you are subscribed to the Google Groups > "Racket Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/racket-users/70e8acf9-9993-0e7c-3d10-b7964cc6ed03%40sagegerard.com. -- You received this message because you are subscribed to the Google Groups "Racket Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/racket-users/CAK%3DHD%2Bbk-AFfBqea1ZpwooO-p%2B%3DpuByuWpNTTKTM9oPOTfEWLg%40mail.gmail.com.
