increase checksum secuirty #105

New issue

Closed

opened 2015-06-10 18:46:12 +00:00 by philm · 4 comments

philm commented

2015-06-10 18:46:12 +00:00

(Migrated from gitlab2.manjaro.org)

Created by: excalibur1234

a md5 checksum is ok to check, whether the download was corrupted or not. but it is not a good security feature, because it can be tampered with.

sha-256 or sha-512 checksums offer much better security. should they be made default in the manjaro-tools?

*Created by: excalibur1234* a md5 checksum is ok to check, whether the download was corrupted or not. but it is not a good security feature, because it can be tampered with. sha-256 or sha-512 checksums offer much better security. should they be made default in the manjaro-tools?

philm commented

2015-06-11 17:07:13 +00:00

(Migrated from gitlab2.manjaro.org)

Created by: udeved

Hmm, I am undecided, it can be set in manjaro-tools.conf

*Created by: udeved* Hmm, I am undecided, it can be set in manjaro-tools.conf

philm commented

2015-06-11 17:30:42 +00:00

(Migrated from gitlab2.manjaro.org)

Created by: excalibur1234

yes, i know.

i do that. but i have not seen anybody else doing it. it seems that anybody else in the team is using the default setting.

i am not mad, if you keep md5 as default. just think about it. you can also ask the team what they think.

*Created by: excalibur1234* yes, i know. i do that. but i have not seen anybody else doing it. it seems that anybody else in the team is using the default setting. i am not mad, if you keep md5 as default. just think about it. you can also ask the team what they think.

philm commented

2015-06-11 17:31:30 +00:00

(Migrated from gitlab2.manjaro.org)

Created by: udeved

What do you think team?
makepkg also has defult md5 for checksums, and its up to user to increase I think.

*Created by: udeved* What do you think team? makepkg also has defult md5 for checksums, and its up to user to increase I think.

philm commented

2015-06-11 19:00:46 +00:00

(Migrated from gitlab2.manjaro.org)

Created by: Kirek

Change the default to sha256, but really this is not a security feature it's to check against corrupted downloads.

*Created by: Kirek* Change the default to sha256, but really this is not a security feature it's to check against corrupted downloads.