3 ms·
> 1) Git doesn't rely on SHA-1 for security. It relies on HTTPS, and a web of trust. I thought that if you signed your git commits or tags with GPG, you implic
by perlgeek 10y ago
> 1) Git doesn't rely on SHA-1 for security. It relies on HTTPS, and a web of trust.
I thought that if you signed your git commits or tags with GPG, you implicitly relied on the commit checksum, and thus on SHA1.
Is that right?
- rocqua 10y agoThat's what I read in the thread about the collision that was found.