jira-importer

**[Premek Vyhnal](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=premek)** commented > both MD5 and SHA1 are "broken"  I didn't remember that about sha1 from the top of my head, lets **use sha256sum** then. > An attacker could...

**[Hervé Boutemy](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=hboutemy)** commented the wrapper.jar url comes first from maven-wrapper.properties and there are default values also in mvnw scripts the reference checksums will have to be put along each place...

**[Marcin Zajaczkowski](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=szpak)** commented > I didn't mean it like that, see my note that I added later. I replied quickly, and missed your update, sorry for confusion. > I think...

**[Slawomir Jaranowski](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=slawekjaranowski)** commented I hope that MWRAPPER-75  will resolve this issue.

**[Premek Vyhnal](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=premek)** commented Yes MWRAPPER-75  looks like it's solving the same issue as I had in mind, but it looks to me that it is disabled by default unless a...

**[Slawomir Jaranowski](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=slawekjaranowski)** commented There is MWRAPPER-79

**[Slawomir Jaranowski](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=slawekjaranowski)** commented Good idea especially for `only-mvnw.cmd` where more of code is in `PowerShell`

**[Slawomir Jaranowski](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=slawekjaranowski)** commented There is a similar issue: MWRAPPER-79

**[Alexis Tual](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=atual)** commented Can we expect the sha256 to be published ? If not then have a `distributionSha512Sum` and `wrapperSha512Sum` supported by the wrapper instead ?

**[Alexis Tual](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=atual)** commented [sjaranowski](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=sjaranowski), do you know if it's on the roadmap ?