ra_serf pristine-downloading-optimisation should use capability negotiation

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

ra_serf pristine-downloading-optimisation should use capability negotiation

Johan Corveleyn-3
Bringing this point from irc to dev@, so it doesn't get lost:

In the context of the recent SHA1-collision problems, and the
viability of ra_serf's pristine-downloading-optimisation (which uses
SHA-1), Brane suggested on irc: RA optimization "should" become the
result of capability negotiation.

--
Johan
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ra_serf pristine-downloading-optimisation should use capability negotiation

Stefan Fuhrmann
On 10.05.2017 01:10, Johan Corveleyn wrote:
> Bringing this point from irc to dev@, so it doesn't get lost:
>
> In the context of the recent SHA1-collision problems, and the
> viability of ra_serf's pristine-downloading-optimisation (which uses
> SHA-1), Brane suggested on irc: RA optimization "should" become the
> result of capability negotiation.

This certainly makes sense when making checksum collision
support opt-in on the server-side.

-- Stefan^2.

Loading...