That's not a relevant answer. Git's use-case is very specific and it's quite possible that this attack won't be relevant. It needs analysis. >no good reason to

That's not a relevant answer. Git's use-case is very specific and it's quite possible that this attack won't be relevant. It needs analysis. >no good reason to use this hash function in modern security software This argument conveniently ignores the cost to switching existing software (i.e. it's completely detached from reality).