2 ms·
Even if SHA-1 were weakened considerably, this would not impact this particular use case all that much... except in cases where git hashes are used in a securit
by api 13y ago
Even if SHA-1 were weakened considerably, this would not impact this particular use case all that much... except in cases where git hashes are used in a security-critical way. (Which is probably not that great an idea...)
- MichaelGG 13y agoDoesn't a signed git tag rely on signing the 160-bit hash? So if SHA-1 was really weakened, you could reuse a signature by generating a repo that hashes to the same value as the signed one?
- csense 13y ago> git hashes are used in a security-critical way Verifying the integrity of the source code of e.g. the Linux kernel is pretty security-critical.