Adam Jensen wrote on Sat, 22 Sep 2018 11:12 -0400: > On 09/22/2018 10:13 AM, Daniel Shahaf wrote: > > One reason for not creating the file in the form > > "${hash}${two_spaces}${filename}" > > is that not everyone uses sha512sum from GNU coreutils. If there were > > additional information in the file besides the hash value, people not on > > linux would have had to sed it out. > > apr and apr-util each do it differently. Consequently, the > idiosyncrasies of each will need to explored and handled separately.
The PGP signatures are presented more uniformly, I think. (The only variable is the location of the public keys reference file.)