11 ms·
Heres the article i normally link to when this comes up: http://stackoverflow.com/questions/4014090/is-it-safe-to-ignore-the-possibility-of-sha-collisions-in-pr
by whyrusleeping 11y ago
Heres the article i normally link to when this comes up: http://stackoverflow.com/questions/4014090/is-it-safe-to-ignore-the-possibility-of-sha-collisions-in-practice http://stackoverflow.com/questions/4014090/is-it-safe-to-ign...
Its generally considered safe to ignore, there are no known sha256 collisions, and most people are fairly confident they wont see one for quite some time.
- _prometheus 11y agothe caveat of course being that SHA256 may be _broken_. That's when we'd have to upgrade to another hash function. (We may improve how this upgrade will work down the road by allowing links to link with multiple hashes at the same time, but at this time this has not proved to be necessary, and can be added later)