#2 create stronger hashes of the tarball than md5 and sha1
Opened by jhrozek. Modified

our release process still documents that the hashes we include on the release page are sha1 and md5. Because especially md5 is not secure anymore we should use stronger ones -- openssl.org uses sha256 and sha1 for example


If we publish more hashes then there is lesser probability of conflict for all of them together :-)

Metadata