➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author benjamin.peterson
Recipients Big Stone, benjamin.peterson, ned.deily
Date 2016-11-08.23:22:44
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1478647361.2090545.781745657.1C0F5FAA@webmail.messagingengine.com>
In-reply-to <1478632652.87.0.0585710912588.issue28555@psf.upfronthosting.co.za>
Content 
If python.org can be MITMed, it doesn't matter how secure the hash is.

On Tue, Nov 8, 2016, at 11:17, Big Stone wrote:
>
> Big Stone added the comment:
>
> I fear GPG is not easy stuff for Windows users.
>
> I fear a bunch of people on this network can circomvent DNS and make
> python.org points to the wrong place.
>
> sha-1 instead of md5 would have been an improvement.
>
> ----------
>
> _______________________________________
> Python tracker <report@bugs.python.org>
> <http://bugs.python.org/issue28555>
> _______________________________________
History
Date User Action Args
2016-11-08 23:22:44benjamin.petersonsetrecipients: + benjamin.peterson, ned.deily, Big Stone
2016-11-08 23:22:44benjamin.petersonlinkissue28555 messages
2016-11-08 23:22:44benjamin.petersoncreate