Releases are hashed with MD5
alfiedotwtf opened this issue · 0 comments
alfiedotwtf commented
MD5 hashes are pretty much useless these days given it only takes a few hours to create collisions. Perhaps move to BLAKE2 (SHA256 is not safe given length extension attacks)