7 ms·
A scheme to generate (and sign) a SHA512 hash that more directly incorporates the full state of the repo was invented, and is used by some projects incl. nodejs
by ploxiln 10y ago
A scheme to generate (and sign) a SHA512 hash that more directly incorporates the full state of the repo was invented, and is used by some projects incl. nodejs
https://github.com/cgwalters/git-evtag https://github.com/cgwalters/git-evtag
https://github.com/nodejs/node/issues/7579 https://github.com/nodejs/node/issues/7579
I personally think it's overkill
- petertodd 10y agoOh, interesting! I do something not unlike that with my OpenTimestamps git commit signing: https://petertodd.org/2016/opentimestamps-git-integration https://petertodd.org/2016/opentimestamps-git-integration I don't describe it in that post unfortunately, as I still consider the git tree "rehashing" support to be alpha-level, but I'll look into git-evtag.