From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Ali Elshishini Newsgroups: gmane.emacs.bugs Subject: bug#55666: enhancement request - SHA-256 for emacs downloads Date: Sun, 29 May 2022 17:08:46 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="39981"; mail-complaints-to="usenet@ciao.gmane.io" Cc: Lars Ingebrigtsen , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> To: Corwin Brust Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sun May 29 19:09:27 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nvMPv-000AFm-As for geb-bug-gnu-emacs@m.gmane-mx.org; Sun, 29 May 2022 19:09:27 +0200 Original-Received: from localhost ([::1]:38886 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nvMPu-0003lp-0V for geb-bug-gnu-emacs@m.gmane-mx.org; Sun, 29 May 2022 13:09:26 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:41752) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nvMPW-0003lO-JP for bug-gnu-emacs@gnu.org; Sun, 29 May 2022 13:09:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:47855) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nvMPW-0005wy-Ao for bug-gnu-emacs@gnu.org; Sun, 29 May 2022 13:09:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nvMPW-000171-3l for bug-gnu-emacs@gnu.org; Sun, 29 May 2022 13:09:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Ali Elshishini Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 29 May 2022 17:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 55666 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: wontfix Original-Received: via spool by 55666-submit@debbugs.gnu.org id=B55666.16538441394264 (code B ref 55666); Sun, 29 May 2022 17:09:02 +0000 Original-Received: (at 55666) by debbugs.gnu.org; 29 May 2022 17:08:59 +0000 Original-Received: from localhost ([127.0.0.1]:41752 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvMPT-00016i-AQ for submit@debbugs.gnu.org; Sun, 29 May 2022 13:08:59 -0400 Original-Received: from mail-bn7nam10olkn2063.outbound.protection.outlook.com ([40.92.40.63]:4801 helo=NAM10-BN7-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nvMPN-00016Q-OU for 55666@debbugs.gnu.org; Sun, 29 May 2022 13:08:57 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=V8sQkpjx5lj6ccbLujTeE6jaR1LeBI30mO2ClYs1cwf5kg+vDSYF9A9yKqGmqxHdwSVz+jWNBJbexjeCP5ZfQw7a93bxf5GfuEgtywCpaiE3FdeulS0vGr6/WoTDtJ678Q+I33ZmD1ozOPncjkfN/9txHOt6A8v7D+FTfFkvJomN5RdSDKu5R7I3cNo3WnikgrPGJKM66GeqhjtFXZsZPALpYjwjJYndgPub/DLbT0W1HMy+h51YZxE93m8q2R8WELE7yS+VEp9FGmWgN51htx21ULraniMTCOc1K1p0pE3n0q89Grmza39n+T7+5RuJR9z+kmbErd2vi6ZbqxR1sw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Jjfuuy4w3KbzFXylOPv8bajgFP/kKG22YjBjptMslmg=; b=Rk/6+lAHFRokQ7Zsov6O9sr3h4SeIfZwlfanxhFL/fNhQ9E5MOzKsudHSsIrlpgMOH6xSg1UTJfS8V3Mfy2CDDPDZfbqpDylcTTivEAMdNrCbK/WD3D2YBHaMjoJPo0yd2t0mciY2egViAKzaFoaHt8uBf6OybNELqMjicSn9kNC7u+CwLq7PrElydczhfdSvi8DUrnrIIkBEOpDPpbTuiLLOWIC2zdbbJ5Ag1WNo8FGFLjXAi5QK6Z5fZgGnTlQpNveIaW+82wcK4EhbVMAMR8cQJfjafTaPi0E63rPCR1DYqFiDg9QyK46lRhUjn+dsTkiaGQJDYZhTUhTqkZ4PA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Jjfuuy4w3KbzFXylOPv8bajgFP/kKG22YjBjptMslmg=; b=F+M2U6r6E3GVtmy0Dd09ZaWveblHlEaRm/9NQ4/UpXVQhMhYnc9Fai2cQGfKK6/eDaQRvEZn4vC4E6XRvT/+b5lUQg86H2sl26oez1OW9t2TwqueEhg6m29nnKj1ohfsI8ffJtGmm2DJUOQUa9VWIzc76wHPgHpuXR4y+GoEExAzMUSmjAD/tCxZFNaBkyOubiYM/d35KB0P8Jzd0tV27H66B2PrCGTqMUZmysQr/0dtt4EbEJvvt4uToXBj1rvGnHaxU0B4tq9lE2RhfcWtigQvHTVf+VnWHaHtuBH+x/V2q24uICnOhOKFtkOix09siOBaZCZXuEmb0/WiM1EPRQ== Original-Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by PH7PR19MB5582.namprd19.prod.outlook.com (2603:10b6:510:135::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.16; Sun, 29 May 2022 17:08:46 +0000 Original-Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::edd5:e27f:fe9:9ebd]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::edd5:e27f:fe9:9ebd%7]) with mapi id 15.20.5293.019; Sun, 29 May 2022 17:08:46 +0000 Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAKTauAAuMugIAAnYnk In-Reply-To: Accept-Language: en-CA, en-US Content-Language: en-CA suggested_attachment_session_id: 21345ea1-5240-6132-c99c-fd1b55f5fd73 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [8x5QO2/BBFC70y5/g9ouMRuryGegC5o16rx/TpIFsUE=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b10e839f-4b74-4158-a34d-08da4195e444 x-ms-traffictypediagnostic: PH7PR19MB5582:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: XZ0CkbF0a9npYeKgaFOxzdwjuXnnn0D1vGkaw6xML7XRA0YLva2lu2EnP8VzKzEmYk6nZC9yv8HRs6uH5c/fH2vJXPBOFShFmltjQq7FX6JsOHRHTGbOqkKh1W8JPZESVavv/kb1VSlPnY0Epll2nQXtu7sF4bX6qfSJb1yEnEuDdvBheCuabonW2gVYxSZvobd20NUOerdJT4dhos828mpNfP8Bv6R5PCV06SiaBskQeIvP/zySEQBydTF+PNf40Ntvu1DumT7h3dTTUJI9agZwPeSym+txBjqCJZxiygcF/hg7/YSx0fhABFIEKSOEonh0s7RtAD2qDjazLM6tf2M5FMk6L5XHlL14k2Z3H/2xS1bAgALwypDUACVnMhdYfJ0seSRNEFzawKGkblnF4GtU7yKDldLch5tsn6nHT1eK84P6/Yo4U10pYhOf0T7ZCF8K+JMmbjU+vSiDjgaVbnduNuUVRQSYlvsaB7ZsChKaNyuHiZG1ARSx18x15UIwKLqJGhYtHbz9Knsfp0/QKfYEesTFidgpbcoSAX79fy9s4FdkJ/LpdfmzxuValpSMKus0hlyxL+39gshlHUFIQDdXoQhDfpM7Dcmj9HFjETHoeD8PjbMxcSQFIN3TjD9xw1TLgYr+sgyHoSuav9SQmkPw+9eNNy++vwsqQ+HX+QLA2nDJaUuX3USL09bFAObrNSNHN7e74rjT8EkuaRy8B2hyVYAHhGj7GD03JNsQyHInpRM00LSy54SPXR 3wW1PHz2ivQKNc0A3ifq8E/AmdrAThkEhFlfE2rmAZYgJQfkwjPVk+FaseoGV1/D8QU8t91bxd3wu0Dh29Ph4Ik49dcZgwfgOn X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: b10e839f-4b74-4158-a34d-08da4195e444 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 May 2022 17:08:46.1826 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR19MB5582 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:233336 Archived-At: --_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable First sorry for top posting, I am using hotmail/outlook, and dont know how = to setup bottom posting Also honestly, I never really knew about this convention of bottom posting Second, that a lot Corwin, adding the SHA hashes will be great Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolete and= broken https://en.wikipedia.org/wiki/SHA-1 So I think SHA-256 should be enough, and if you want to can consider SHA-51= 2 Most project I see use SHA-256, and only very few offer or use SHA-512 Thanks Ali ________________________________ From: Corwin Brust Sent: May 29, 2022 3:42 AM To: Ali Elshishini Cc: Lars Ingebrigtsen ; 55666@debbugs.gnu.org <55666@debbug= s.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads On Fri, May 27, 2022 at 6:46 AM Ali Elshishini wrote= : > > A checksum file (a file containing all checksums) can be included in the = ftp folders > (each folder can have one checksums file for the files it contains) I think this is a great idea. If nobody objects, I'll start including something along these lines with my next upload of Windows binaries (or maybe sooner, backfilling something for 28.1). For the moment, you can get SHA1 sums for all (or at least, nearly all) the binaries I've created from here: https://corwin.bru.st/emacs-28/README (The parent folder --which has indexing enabled-- is where I've been staging my files before uploading to the GNU FTP servers and often includes other builds that I don't plan to upload.) If these don't work LMK and I'll regenerate the README file. I do have a script for that but it will take a little fooling around to make it worthly of including on the GNU FTP site (presuming others agree with me your idea of adding files with SHA1 information to the FTP folders is a good one). Thanks for the suggestion. BTW, you can also get my public key from Savannah by clicking "Download GPG Key" from my profile page, here: https://savannah.gnu.org/users/carlc --_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
First sorry for top posting, I am using hotmail/outlook, and dont know h= ow to setup bottom posting
Also honestly, I never really knew about this convention of bottom posti= ng 

Second, that a lot Corwin, adding the SHA hashes will be great 

Finally, just my 2 cent, SHA1 is to my knowledge is considered obsolete = and broken https://en.wikipedia.org/wiki/SHA-1
So I think SHA-256 should be enough, and if you want to can consider SHA-51= 2 

Most project I see use SHA-256, and only very few offer or use SHA-512

Thanks
Ali 
From: Corwin Brust <corw= in@bru.st>
Sent: May 29, 2022 3:42 AM
To: Ali Elshishini <shishini@outlook.com>
Cc: Lars Ingebrigtsen <larsi@gnus.org>; 55666@debbugs.gnu.org = <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
On Fri, May 27, 2022 at 6:46 AM Ali Elshishini <= ;shishini@outlook.com> wrote:
>
> A checksum file (a file containing all checksums) can be included in t= he ftp folders
> (each folder can have one checksums file for the files it contains)
I think this is a great idea.  If nobody objects, I'll start including=
something along these lines with my next upload of Windows binaries
(or maybe sooner, backfilling something for 28.1).

For the moment, you can get SHA1 sums for all (or at least, nearly
all) the binaries I've created from here:

https://corwin.bru.st/ema= cs-28/README

(The parent folder --which has indexing enabled-- is where I've been
staging my files before uploading to the GNU FTP servers and often
includes other builds that I don't plan to upload.)

If these don't work LMK and I'll regenerate the README file.  I do
have a script for that but it will take a little fooling around to
make it worthly of including on the GNU FTP site (presuming others
agree with me your idea of adding files with SHA1 information to the
FTP folders is a good one).

Thanks for the suggestion.

BTW, you can also get my public key from Savannah by clicking "Downloa= d GPG
Key" from my profile page, here:

  https://savannah.gn= u.org/users/carlc
--_000_DM5PR19MB46801CE49BE2C8F4D1A427B0DBDA9DM5PR19MB4680namp_--