Re: [Distutils] New buildout options: checksums and allow-omitted-checksums

On Thu, Mar 17, 2011 at 04:55:05PM +0100, Thomas Lotze wrote:

two weeks ago I asked about your opinions on a buildout option that enforces specifying (MD5) checksums for all files downloaded through buildout's download utility API.

Please don't hardcode the checksum algorithm to MD5. Security researchers have been telling everyone to stop using MD5 (and SHA1) for a while now.

Marius Gedminas