On Fri, Dec 29, 2006 at 05:05:34PM +0100, Patrice Dumas wrote: > I think that a mention of the license check, and of the upstream source match > (with a md5sum if possible or a comment if things are non standard) should SHA not MD5 please (or better yet both). MD5 alone is no longer sufficient for a large archive file you can put lots of zeros into. -- Fedora-maintainers mailing list Fedora-maintainers@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-maintainers -- Fedora-maintainers-readonly mailing list Fedora-maintainers-readonly@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-maintainers-readonly