Yeah, on hindsight maybe he should have made his own 160bit CRC variant :) Honestly, I think it's fair to say that hashes isn't meant to be a security feature.

Yeah, on hindsight maybe he should have made his own 160bit CRC variant :) Honestly, I think it's fair to say that hashes isn't meant to be a security feature. But signed tags/commits/etc. probably need a better hash.