On 04/04/2023 23:42, Kevin Fenzi wrote:
But then after a outcry... "We are reverting this change for now. More details to follow."
Yes, after a lot of negative feedback they (temporary?) reverted this change. Even their own vcpkg (package manager by Microsoft) uses these hashes to verify downloaded files.
They said that after each download of the git tag archive, its contents are permanently stored on the content server, and all subsequent downloads will be performed by it. It consumes a lot of disk space.
-- Sincerely, Vitaly Zaitsev (vitaly@xxxxxxxxxxxxxx) _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue