Re: [PATCH 1/2] Verify source hashes with a fallback on md5