3 ms·
There is a downside that this would mean commit-prefixes remain sensitive to collisions. Hence anyone checking out a commit by a hash-prefix would still be vuln
by rocqua 7y ago
There is a downside that this would mean commit-prefixes remain sensitive to collisions. Hence anyone checking out a commit by a hash-prefix would still be vulnerable.
Not a dealbreaker by far, but still a slight mark against this solution.
- u801e 7y agoDoes git have code to detect whether a hash prefix is ambiguous? I know that if you use a short prefix (which is more likely to be shared by multiple objects), git will output an error message staying that the object reference is ambiguous IIRC.
- loeg 7y agoYes.
- IshKebab 7y agoI don't see how it would change anything. A collision of a short prefix is trivial to generate with any hash.