[Rpm-maint] [rpm-software-management/rpm] Disable SHA1, MD5, RIPEMD160, and <2048 bit RSA/DSA (#1467)

[Panu Matilainen]

Those ancient hashes, SIGMD5 in particular, are a mandatory part of the rpm package format as documented in LSB. Rpm >= 4.14.2 has the necessary technology to finally make the MD5 header+payload hash properly obsolete, but that's a very, very new development in terms of rpm time.

A thing like this is a policy decision, and we try to avoid those in rpm. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1467#issuecomment-754524344
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210105/0620f533/attachment.html>