[Fedora-packaging] Review guidelines source checksum algorithm

[Björn Persson]

Garrett Holmstrom wrote:
> The main review guidelines page [1] specifically requires that one use
> md5sum to compare packages' tarballs against those from upstream.  Is it
> necessary to require a specific algorithm?  If so, should it still be
> MD5 in this day and age?

Why use checksums at all when diff works just fine?

Björn Persson
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part.
Url : http://lists.fedoraproject.org/pipermail/packaging/attachments/20110402/f897b3d4/attachment.bin