Is SHA-1 being used in a security-critical way in git, though? I tend to agree with the points made towards the end of the article. If someone malicious can ma

Is SHA-1 being used in a security-critical way in git, though? I tend to agree with the points made towards the end of the article. If someone malicious can make commits to your repo, you have a much worse problem than a possible hash collision. Most languages these days have a built-in hashtable type, and they use some kind of non-security-critical hash function, albeit usually with a random seed, that's a lot weaker than SHA-1 - often you only need something like 32-64 bits of output in the first place as no-one allocates more than 2^64 buckets as far as I know. From a security perspective that's even worse than MD5! I'd argue (and so does the article, in part) that the use of SHA-1 in git is closer to the use of a hash in a hashtable than to the use of a cryptographic checksum - using SHA-1 for subresource integrity on the web is an obvious security risk (luckily, it's not allowed there) but I can't see an obvious attack on git's use that doesn't also assume you can do much worse things.