Web lists-archives.com

Re: Archive no longer accepts uploads signed using SHA-1 or RIPE-MD/160

On Wed, Feb 22, 2017 at 09:07:23PM +0100, Ansgar Burchardt wrote:
> The archive no longer accepts uploads signed using the SHA-1


(https://shattered.io is fun)

> or RIPE-MD/160 algorithms.

Uhh? AFAIK, RIPEMD160 is not compromised at all, not even in a
theoretical attack. Why was this part of the decision taken?

(there is a theoretical attack against RIPEMD, but that is not the same
thing as RIPEMD160)

< ron> I mean, the main *practical* problem with C++, is there's like a dozen
       people in the world who think they really understand all of its rules,
       and pretty much all of them are just lying to themselves too.
 -- #debian-devel, OFTC, 2016-02-12

Attachment: signature.asc
Description: PGP signature