Please help me with HASH results being wrong!

[Todd Zullinger]

Lee Clark wrote:
> Thats odd
>
> your site says SHA1

You missed the large red notice on https://fedoraproject.org/verify as
well as this paragraph in my previous reply:

I wrote:
> (The Hash: SHA1 line is part of the PGP signature.  It has no relation
> to the sha256 checksum data in the *-CHECKSUM files.
> https://fedoraproject.org/verify has details on how to verify
> downloads and does point out that sha256sum is what should be used.)

This is a common misconception.  We'll work on trying to make it
clearer in future releases.  Of course, there's only so much we can
do. ;-)

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
When I think about all the crap I learned in high school ... it's a
wonder I can think at all.
    -- Paul Simon

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-websites-list/attachments/20091120/23b280ac/attachment.sig>