Control: severity -1 minor
On Thu, May 19, 2022 at 12:31:28PM +0800, Zhang Boyang wrote:
>Package: debian-cd
>
>Hello,
>
>I downloaded debian iso and its SHA512SUMS file. However, when I use gpg to
>verify authenticity of SHA512SUMS, I found the signature file use SHA256 as
>its digest algorithm.
Package: debian-cd
Hello,
I downloaded debian iso and its SHA512SUMS file. However, when I use gpg
to verify authenticity of SHA512SUMS, I found the signature file use
SHA256 as its digest algorithm. Although SHA256 is pretty safe, it's
seem strange that sign a SHA512SUMS with SHA256. I think
2 matches
Mail list logo
