I meant to exclude md5 and sha1, e.g. hash functions with known problems. SHA224 would be a weird choice but it wouldn't personally offend me otherwise. It would be fun to see how many wheel handlers support non-sha256 hash functions.

On Mon, Mar 29, 2021 at 9:56 PM Theallredman via Python-Dev <python-dev@python.org> wrote:
Thank you.  I can't think of a compelling reason someone would want to choose SHA224 over SHA256 in the context of wheel generation.  It just that the PEPs are usually pretty explicit and SHA224 seemed to be implicitly excluded from RECORD files.  And I'm considering the details of making a pretty pedantic wheel generation PEP517 backend.


‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, March 29, 2021 2:16 PM, Paul Moore <p.f.moore@gmail.com> wrote:

> On Mon, 29 Mar 2021 at 17:40, Theallredman via Python-Dev
> python-dev@python.org wrote:
> > So going back to my actual question SHA224 is disallowed in record files because it's bit length is less then 256?
> It doesn't look like it's ever been excluded. The only explicit
> exclusions are MD5 and SHA1 as you point out. Do you have a particular
> reason to want to use SHA224? Pretty much everyone is using SHA256, as
> far as I know.
> Paul

Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-leave@python.org
Message archived at https://mail.python.org/archives/list/python-dev@python.org/message/NB6MLDDDJHRTRMOEWDFG5IYGZCP65K6V/
Code of Conduct: http://python.org/psf/codeofconduct/