hashes in download directory

[Tom Zeller]

On Wed, Mar 11, 2015 at 12:09 PM, Ian Young <ian at iay.org.uk> wrote:
> We're including hash files in the download directory, presumably as an additional integrity check for people who don't use GPG. (Obviously not as an authenticity check, right?)

Integrity != authenticity, check.

> In 3.0.0, we included SHA-1 and SHA-256 hashes for all four artifacts. In the 3.1.0 directory, we had SHA-1 and a mixture of SHA-256 (for the MSIs) and SHA-512 (for the .gz and .zip). This broke something at my end.

I typed sha512sum thinking sha256sum, a mistake.

> Scott has now replaced the SHA-512 ones with SHA-256 so we now have what we had before.

Thanks.