SHA-1 checksums to be replaced with something better at https://gnupg.org/download/integrity_check.html ?

[Doug Barton]

On 03/17/2016 01:00 PM, Kristian Fiskerstrand wrote:
> so if the server was to be compromised in some way ...

... the checksum (that you are downloading from the same server) becomes 
useless.

Doug