Rules of the game for checksums in portfiles

Joshua Root jmr at macports.org
Sun Feb 21 11:29:59 PST 2010


On 2010-2-22 06:03 , Marko Käning wrote:
> Hi,
> 
> in documentation for Portfiles there are 3 different checksums shown...
> 
> I am wondering whether all three are acutally necessary or whether md5 is sufficient for setting up acceptable Portfiles.

Only one checksum is *required*. However, enough doubt has been cast on
the security of md5 that it is prudent to use another hash function. And
since `port -v checksum` instantly produces a checksums line for you,
why not use 3?

- Josh


More information about the macports-users mailing list