Re: More md5 checksums, please

[Marc Espie <espie@nerim.net>]

On Fri, Jun 14, 2002 at 12:20:51PM -0600, Drew Einhorn wrote:
> After some serious gnashing of teeth, and pounding my
> head against the wall, I can to the conclusion, that I'm
> unfortunate to be behind a broken, transparent, ftp proxy.
> It claims to be an ftp accelerator for a satellite link.
> 
> It randomly corrupts about 1 or 2 bytes per 100MB.  I first
> became  aware of the problem downloading large iso files that
> are almost certain to be corrupted.  Smaller files are less
> likely to be corrupted, but it happens way too often.
> 
> My life would be much simpler if there were md5 checksums,
> for most everything at ftp.openbsd.org, and its mirrors.
Anything that is gzipped is  checksummed. You can invoke gzip in
verification mode (-t if I remember right) to check archive integrity.

MD5 is only needed if there are reasons to believe someone is actively
tampering with the files.