Issue #74 new

MD5 hash is not enough to provide security

anatoly techtonik
created an issue

MD5 hashes are not safe. They should probably be replaced by 'sha1_size' checksums.

Comments (4)

  1. Donald Stufft

    I've suggested getting rid of MD5 a number of times. Eventually my proposals always end up getting shot down because the fact of the matter is that MD5's preimage resistance is not broken yet. If you feel strongly about this I suggest you raise an issue on the distutils-sig mailing list.

  2. Log in to comment