Rules of the game for checksums in portfiles
jmr at macports.org
Sun Feb 21 11:29:59 PST 2010
On 2010-2-22 06:03 , Marko Käning wrote:
> in documentation for Portfiles there are 3 different checksums shown...
> I am wondering whether all three are acutally necessary or whether md5 is sufficient for setting up acceptable Portfiles.
Only one checksum is *required*. However, enough doubt has been cast on
the security of md5 that it is prudent to use another hash function. And
since `port -v checksum` instantly produces a checksums line for you,
why not use 3?
More information about the macports-users