3 ms·
It could be that they knew that the hash algorithm was good for uniqueness and they were unconcerned about security. The SHA1 hash provides no security in git,
by bebop 7y ago
It could be that they knew that the hash algorithm was good for uniqueness and they were unconcerned about security. The SHA1 hash provides no security in git, only whether a file has been changed or not.
While collisions have been found in SHA1, it is still a decent hashing algorithm where collisions are extremely unlikely.
- dependenttypes 7y ago> collisions are extremely unlikely Random collisions are quite unlikely, intentional collisions not so much. > The SHA1 hash provides no security in git False. OpenPGP signatures in git depend on the SHA1 hash. Same for someone doing a checkout at a specific hash because they trust it.