[Distutils] Migrating Hashes from MD5 to SHA256

Donald Stufft donald at stufft.io
Sun Jul 28 21:16:21 CEST 2013

On Jul 28, 2013, at 3:13 PM, Vinay Sajip <vinay_sajip at yahoo.co.uk> wrote:

>> From: Donald Stufft <donald at stufft.io>
>> Yes they will change to have #sha256=…. instead of #md5=...
> [snip]
>> Here we are a little more flexible. I can leave the md5_digest key there and
>> simply add a sha256_digest key.
> [snip]
>> Again more flexible. I can simply add a show_sha256 action.
> [snip]
>> Typically it's left up to us. We often just work and deploy changes without
> [snip]
> Thanks for the update, it'll help me to update distlib when the time comes.
> Regards,
> Vinay Sajip

I sugggest distlib take the same approach as pip and setuptools. Allow any
#hashname=hash so that it will function with whatever hash people use.

Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20130728/0dc35afd/attachment.pgp>

More information about the Distutils-SIG mailing list