Re: [PATCH] build: use sha256sum instead of sha1sum to sign releases

Subject: Re: [PATCH] build: use sha256sum instead of sha1sum to sign releases

Date: Thu, 02 Mar 2017 17:37:36 -0400

To: Tomi Ollila, notmuch@notmuchmail.org

Cc:

From: David Bremner

Tomi Ollila <tomi.ollila@iki.fi> writes:

> On Thu, Mar 02 2017, David Bremner <david@tethera.net> wrote:
>
>> SHA1 is weak/broken.
>> ---
>
> I'd just have 'build: use sha256sum instead of sha1sum to sign releases'
> as a commit message.
>

Sure, I don't mind; the editorializing doesn't really add much.

pushed to master

d

Thread: