RFC: Deprecate MD5 checksums from Release process

Project Governance
Author
Target
policy
MD5 should not be considered cryptographically secure for verifying download integrity. We're already providing both SHA256 hashes and GPG signatures for this ...

Should MD5 checksums be left in or removed?

Overall Results

Remove
Keep
Remove
29 Votes (100%)
Keep
0 Votes (0%)

Voting Timeline

Dates based on UTC

Voting Breakdown

Remove immediately or deprecate prior to removal?

Overall Results

Remove Now
Deprecate
Remove Now
29 Votes (97%)
Deprecate
1 Votes (3%)

Voting Timeline

Dates based on UTC

Voting Breakdown