ant-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jesse Glick <jesse.gl...@sun.com>
Subject Re: cvs commit: ant/src/etc/testcases/taskdefs checksum.xml
Date Sat, 11 Dec 2004 01:57:42 GMT
Kev Jackson wrote:
> If this is related to MD5 checksums, they've recently been proven to
> not be conclusive proof that the content of the file is the same as
> the checksum, ie two different files can create the same checksum
> under certain conditions.

Maybe it would be a good idea to add a warning to the <checksum> doc 
page that MD5 is now widely thought to be weak, and anyone serious about 
security should consider (at least) SHA-1?

-J.

-- 
Jesse Glick <mailto:jesse.glick@sun.com> x22801
NetBeans, Open APIs  <http://www.netbeans.org/>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


Mime
View raw message