[OpenIndiana-discuss] Spare bandwidth for mirroring

Jesus Cea jcea at jcea.es
Thu Nov 4 01:26:46 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/11/10 23:19, Richard L. Hamilton wrote:
> Sure, but it's a simple confidence builder, at least for a torrent
> consisting of a single file; it lets people satisfy themselves that
> they're getting the "real" thing, and not a possibly modified
> redistribution hosted by a deceptively similarly named tracker or the like.

Anybody that knows how BitTorrent works would not need this
"confidence", but I agree that MD5 *AND* SHA1 checksums should be
published. They would be needed by the people who download the ISO
images from the central server, and would be used too by the people
using BitTorrent, even if technically they are not needed.

MD5 alone is not safe enough :) :
<https://secure.wikimedia.org/wikipedia/en/wiki/Md5#Security>.

I can't wait for SHA-3:
<https://secure.wikimedia.org/wikipedia/en/wiki/Sha3>.

- -- 
Jesus Cea Avion                         _/_/      _/_/_/        _/_/_/
jcea at jcea.es - http://www.jcea.es/     _/_/    _/_/  _/_/    _/_/  _/_/
jabber / xmpp:jcea at jabber.org         _/_/    _/_/          _/_/_/_/_/
.                              _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQCVAwUBTNIL1plgi5GaxT1NAQIOMgP7B4nki5j0/2ZklpLekFDSKp5Zz9y80mfX
7YESAju17/PC3UZBzGdAIilLEYeg64787lmWeJSY7qIiqF6OylwNct9r2lIsIpeV
MX0IjR9RHlt3A99hfcEAYO5mv9coNMg1jjizOhufDGFd5Zj9uZYqi8D7aGW4Zfc5
Wr31q0/0hVg=
=U+iH
-----END PGP SIGNATURE-----



More information about the OpenIndiana-discuss mailing list