PEP 376

[Joachim Strömbergson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Aloha!

Richard Brodie wrote:
> "Joachim Str�mbergson" <Joachim at Strombergson.com> wrote in message 
> news:mailman.2422.1246418400.8015.python-list at python.org...
> 
>> Even so, choosing md5 in 2009 for something that (hopefully) will be
>> used in years is a bad design decision. It creates a dependency for to
>> an algorithm that all sensible recommendations point you to move away
>> from.
> 
> Why not write the field as algorithm:value?
> 
> e.g. sha1:8590b685654367e3eba70dc00df7e45e88c21da4
> 
> Installers can fallback to using hashlib.new(), so you can plug in a new
> algorithm without changing the PEP or the installer code. 

+1

Good idea and future proof as well as being simple.

- --
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
Kryptoblog - IT-säkerhet på svenska
http://www.strombergson.com/kryptoblog
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpMaFoACgkQZoPr8HT30QHVxQCfWqKprUaAQxaxTfYJVfIp8+FC
5UIAn2cWNoMe+sdNO4BSZG7e+19qkqvl
=Id7s
-----END PGP SIGNATURE-----