summaryrefslogtreecommitdiffstats
path: root/man/deb-changes.pod
diff options
context:
space:
mode:
Diffstat (limited to 'man/deb-changes.pod')
-rw-r--r--man/deb-changes.pod12
1 files changed, 10 insertions, 2 deletions
diff --git a/man/deb-changes.pod b/man/deb-changes.pod
index 282d339..2813eba 100644
--- a/man/deb-changes.pod
+++ b/man/deb-changes.pod
@@ -181,9 +181,14 @@ This field lists all files that make up the upload.
The list of files in this field must match the list of files in the
other related B<Checksums> fields.
-=item B<Checksums-Sha1:> (required)
+B<Note>: The MD5 checksum is considered weak,
+and should never be assumed to be sufficient for secure verification,
+but this field cannot be omitted as it provides metadata not available
+anywhere else.
-=item B<Checksums-Sha256:> (required)
+=item B<Checksums-Sha1:> (required, weak)
+
+=item B<Checksums-Sha256:> (required, strong)
=item S< >I<checksum> I<size> I<filename>
@@ -202,6 +207,9 @@ These fields list all files that make up the upload.
The list of files in these fields must match the list of files in the
B<Files> field and the other related B<Checksums> fields.
+B<Note>: The SHA-1 checksum is considered weak,
+and should never be assumed to be sufficient for secure verification.
+
=back
=head1 BUGS