3 ms·
The sha1 hash isn't used for security. You should be signing your commits if security is a concern.
by bhhaskin 10y ago
The sha1 hash isn't used for security. You should be signing your commits if security is a concern.
- nshepperd 10y agoUh, even a signed commit does still rely on the sha1 hash of the actual tree object and any parent commits. It won't stop something bad from happening if you fetch from a sha1 repo.