Usage of MD5 Hash on Download site is outdated

ExportXMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Normal
    • None

      On Picard's download page (https://picard.musicbrainz.org/downloads/) the MD5 hashes for each files are listed. Unfortunately MD5 is cryptographically broken due to hash collisions. (See: https://en.wikipedia.org/wiki/MD5#Security)

       

      Proposal: Provide SHA256 hash, or even better: PGP signature

            Assignee:
            Unassigned
            Reporter:
            bhei
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:

                Version Package