Re: md5sums in deb
On Tue, 9 May 2000, Wichert Akkerman wrote:
> Previously Ivar Smolin wrote:
> > i can generate /var/lib/dpkg/info/*.md5sums, but why can't package
> > maintainers do it? how can i be sure, that md5sums, generated by myself,
> > are ok?
>
> Because the maintainers of those packages know that adding those md5sums
> doesn't give you any extra security at all.
And Ivar's sentimate is generally why it is a bad idea to include them at
all :<
They serve a purpose, but dpkg should optionally create them on extract
(and include user/group/perm information too)
Jason
Reply to: