[www.kde.org] [Bug 336492] ftp.kde.org should include MD5 files for files

Ben Cooksley bcooksley at kde.org
Fri Jun 20 12:20:41 UTC 2014


https://bugs.kde.org/show_bug.cgi?id=336492

Ben Cooksley <bcooksley at kde.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #1 from Ben Cooksley <bcooksley at kde.org> ---
ftp.kde.org is an unsupported service and should not be in use.
All access to KDE source tarballs should be via download.kde.org, which
provides .md5 and .sha1 files for all files it hosts.

In any case, we won't be adding such files because they can easily be
compromised by an attacker who has gained control of a given mirror.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the kde-www mailing list