incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sebb <seb...@gmail.com>
Subject Re: [VOTE] Apache Ambari (incubating) 1.2.1 Release Candidate RC0.
Date Mon, 11 Mar 2013 23:36:44 GMT
On 11 March 2013 20:17, Owen O'Malley <omalley@apache.org> wrote:
> On Sun, Mar 10, 2013 at 8:13 PM, sebb <sebbaz@gmail.com> wrote:
>
> The ambari-1.2.1-incubating.tar.gz.mds file is wrong; there should be
>> separate files for each hash type.
>> Normally only MD5 and SHA are provided.
>>
>
> In what way are they "wrong?" It is a perfectly well defined output format
> that is the preferred one for Ambari. Depending on MD5 or even SHA1 for
> tamper detection is in fact wrong.

[So why are those two in the mds file?!]

But that's not the primary intention of the hashes anyway; hashes are
intended for checking that a download has succeeded.
Proper tamper detection requires signatures.

> -- Owen

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message