[dev] PEAR GPG signing (patches)

[Mathieu Parent]

2013/11/5 Michael M Slusarz <slusarz at horde.org>:
> Quoting Michael M Slusarz <slusarz at horde.org>:
>
>> Quoting Mathieu Parent <math.parent at gmail.com>:
>>
>>> Can we really rely on md5sums to check files? (response is probably no
>>> [1]). A solution would be to add sha1sum to package.xml.
>>
>>
>> Yes - I thought the same thing when working with PEAR and my next patch
>> was to add sha1 support.  But all existing package.xml files contain
>> md5sums, so this is something that is as critical.
>
>
> https://github.com/pear/pear-core/pull/21

Great!

-- 
Mathieu Parent