I would not recommend pushing the issue. There are many more important things that need to be worked on, so this may very well sit on the back burner. I believe that there is a package you could check out, make the changes, and then propose a merge and see if it will be accepted. On May 29, 2011 2:10 PM, "belabela" <789...@bugs.launchpad.net> wrote: > ohh, sry. :) > > then I will wait till weekdays > > -- > You received this bug notification because you are a member of Ubuntu > Website Community Team, which is a subscriber of a duplicate bug > (789674). > https://bugs.launchpad.net/bugs/789688 > > Title: > UbuntuHashes doesn't contains SHA256 > > Status in “ubuntu-docs” package in Ubuntu: > Confirmed > > Bug description: > Binary package hint: ubuntu-docs > > It's great that > https://help.ubuntu.com/community/UbuntuHashes > provides MD5 checksums over HTTPS, but theres a problem with MD5 - it't not trustable see link: > https://secure.wikimedia.org/wikipedia/en/wiki/MD5#Security > > It would be a wise thing to use SHA256 instead of MD5: > https://secure.wikimedia.org/wikipedia/en/wiki/SHA256 > > because there are already SHA256SUMS in the mirror servers, e.g.: > http://ftp.freepark.org/pub/CDROM-Images/ubuntu//11.04/SHA256SUMS > > p.s.: the problem serving SHA256SUMs over HTTP that it gives false > sense of security. > > It MUST be served over HTTPS to be trustable. > > Please update the /UbuntuHashes site from MD5 hashes to SHA256 hashes
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/789688 Title: UbuntuHashes doesn't contains SHA256 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
