[tor-bugs] #9930 [Website]: SHA-1 is weak: Use better hash to generate signatures (was: SHA-1 is weak)

[Tor Bug Tracker & Wiki]

#9930: SHA-1 is weak: Use better hash to generate signatures
-------------------------+-----------------
     Reporter:  mkral    |      Owner:
         Type:  defect   |     Status:  new
     Priority:  normal   |  Milestone:
    Component:  Website  |    Version:
   Resolution:           |   Keywords:
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-----------------

Comment (by nickm):

 If the signatures on the website start using a better hash, which versions
 of gnupg will be able to check them? I support this, so long as we're not
 going to start depending on a very rare gnupg version.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9930#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online