summaryrefslogtreecommitdiffstats
path: root/man/dsc.pod
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--man/dsc.pod11
1 files changed, 7 insertions, 4 deletions
diff --git a/man/dsc.pod b/man/dsc.pod
index 9e6f916..5b50556 100644
--- a/man/dsc.pod
+++ b/man/dsc.pod
@@ -45,7 +45,7 @@ B<Package-List>, B<Files>, B<Checksums-Sha1> and B<Checksums-Sha256>,
see below).
The control data might be enclosed in an OpenPGP ASCII Armored signature,
-as specified in RFC4880.
+as specified in RFC9580.
=head1 FIELDS
@@ -248,11 +248,11 @@ B<Essential> field, that is a B<yes> value.
=back
-=item B<Files:> (required)
+=item B<Files:> (required, weak)
-=item B<Checksums-Sha1:> (required)
+=item B<Checksums-Sha1:> (required, weak)
-=item B<Checksums-Sha256:> (required)
+=item B<Checksums-Sha256:> (required, strong)
=item S< >I<checksum> I<size> I<filename>
@@ -272,6 +272,9 @@ These fields list all files that make up the source package.
The list of files in these fields must match the list of files in the
other related fields.
+B<Note>: The MD5 and SHA-1 checksums are considered weak,
+and should never be assumed to be sufficient for secure verification.
+
=back
=head1 BUGS