About 10-11 years ago, I was contacted by an employee at NOAA who needed sha1 checksums of open-source software I released. He needed it so that it could go on

About 10-11 years ago, I was contacted by an employee at NOAA who needed sha1 checksums of open-source software I released. He needed it so that it could go on their whitelist of usable software, but he couldn't generate them himself due to policy. Whitelisting acceptable software really isn't a bad idea, especially for organizations that care about safety and security of data. The next step is to lock down the platforms to only execute whitelisted software (similar to how Apple tries to lock down iPhones, iPods, and iPads).