Change MD5 checksums to SHA512

MD5 is not safe anymore as you can read here . It would be cool if SHA256 or SHA512 were presented instead on the download page.

For future releases instead MD5 - SHA512 should be provided on the file server . Having both SHA256 and SHA512 gives users the most security. Also, these files should be put in plaintext (.txt extension) instead of files with .sha256 extension because having to download a checksum file defeats the whole purpose of them. People should be able to read the checksums and verify them without the need of downloading them. Here's an example from Arduino .

Checksums are used to prevent an attacker from intercepting an installer (or any file) and giving the user a modified and malicious version. If user has to also download the checksum, then the attacker can also modify it.

With MD5 (and theoretically SHA1) an attacker can even generate a malicious file that looks just like the original one and having the same MD5 sum.