Commits are still signed with sha1, albeit a version that is resistant to the current attack against sha1. It kinda sucks, I'd be a lot more willing to sign com

Commits are still signed with sha1, albeit a version that is resistant to the current attack against sha1. It kinda sucks, I'd be a lot more willing to sign commits (well, I do, but still) if it were at least backed by crypto that doesn't have decades of issues.