[maemo-developers] Fwd: Debian derivatives census: missing SHA-1 hashes

[From: Jeremiah Foster]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Getting involved in the Debian Derivative Census is a great way to preserve the life of your Maemo software and potentially expand your user base. This forwarded email contains a lot more information and some requests for the use of SHA1 sums in the Maemo archive.

Regards,

Jeremiah

Begin forwarded message:

> Resent-From: debian-derivatives at lists.debian.org
> From: Paul Wise <pabs at debian.org>
> Date: August 14, 2011 23:48:09 GMT+02:00
> To: debian-derivatives <debian-derivatives at lists.debian.org>
> Subject: Debian derivatives census: missing SHA-1 hashes
> 
> Hi all,
> 
> If you are receiving this mail that means you are participating in the
> Debian derivatives census[1] and that your entry has an issue.
> 
> Please ensure that:
> 
>     1. Your APT repositories have SHA-1 hashes for every source and
>        binary package so we can compare with old Debian packages.
>     2. If you are using SHA-1 hashes in your APT repositories, please
>        ensure that there is such a hash for every single file,
>        especially for all the source package files.
>     3. SHA-256 hashes are not and will not be used by the census, but
>        Debian strongly encourages the use of hashes stronger than
>        SHA-1.
> 
> The reason for these is that we are pursuing integration of information
> about packages from derivatives into Debian infrastructure and that
> integration will be using SHA-1 hashes to determine if packages were
> ever in Debian. Please note that if you are inheriting Packages or
> Sources files from Debian then missing SHA-1/SHA-256 hashes could be the
> fault of the Debian archive (http://bugs.debian.org/637563).
> 
> In addition please make sure there is a contact point listed in the
> maintainer field of your census page.
> 
> While you are editing your page, please fill in as much of the fields as
> you have data for.
> 
> Please direct any questions you have to the derivatives list[3] or IRC
> channel[4]. We strongly encourage you to join both of these.
> 
>     1. http://wiki.debian.org/Derivatives/Census
>     2. http://wiki.debian.org/Derivatives/CensusTemplate
>     3. http://lists.debian.org/debian-derivatives
>     4. irc://irc.oftc.net/debian-derivatives
> 
> -- 
> bye,
> pabs
> 
> http://wiki.debian.org/PaulWise

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
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=VnaS
-----END PGP SIGNATURE-----