diff --git a/README.md b/README.md
index 800e32d..8f92f71 100644
--- a/README.md
+++ b/README.md
@@ -37,3 +37,15 @@ Currently a bug in `./mach package` makes this build fail, but it did produce th
 make artifacts
 ```
 This will produce the -setup.exe and portable .zip. Have fun!
+
+# Uploading a release
+
+To actually submit these artifacts to the Windows repository as release files, use:
+```
+python3 mk.py upload <token>
+```
+This would involve having a valid token, ofcourse, but also something more: [Git for Windows](https://git-scm.com/). From this package, we only need `sha256sum.exe` to calculate our checksums. Mozilla provides only `md5sum.exe` in their very old version of the mingw tools. Simply installing Git won't be enough to get `sha256sum.exe` in our path, the `C:\mozilla-build\start-shell.bat` file needs a little tweak at line 55, to read:
+```
+SET "PATH=%PATH%;!GITDIR!;c:\Program Files\Git\usr\bin"
+```
+This should put `sha256sum.exe` in your path.
diff --git a/mk.py b/mk.py
index b76102b..46ded3c 100755
--- a/mk.py
+++ b/mk.py
@@ -159,11 +159,11 @@ def upload(token):
             # Files we need to upload..
             zip_filename = 'librewolf-{}.en-US.win64.zip'.format(full_version)
             setup_filename = 'librewolf-{}.en-US.win64-setup.exe'.format(full_version)
-            exec('md5sum {} {} > md5sums.txt'.format(setup_filename,zip_filename))
+            exec('sha256sum {} {} > sha256sums.txt'.format(setup_filename,zip_filename))
             exec('rm -f upload.txt')
             do_upload(setup_filename,token)
             do_upload(zip_filename,token)
-            do_upload('md5sums.txt',token)
+            do_upload('sha256sums.txt',token)
 
             
 #