News for hackers. Stuff that matters.

A comment on Linus' reply on Git and SHA-1 collision. Parent comment

Re:Linus' reply on Git and SHA-1 collision by tlrobinson on Friday February 24, 2017 @03:31AM (#13722027)
1) Git doesn't rely on SHA-1 for security. It relies on HTTPS, and a web of trust.

I would say cryptographic integrity definitely counts as "security".

I agree this isn't currently a big deal, but it's probably time to start migrating to a better hash.

[ Parent | on HN ]
Re:Linus' reply on Git and SHA-1 collision by darklajid on Friday February 24, 2017 @03:49AM (#13722104)
But .. that's what Linus is saying in his mail. Like, really exactly what you say in your last sentence..?
[ Parent | on HN ]
Re:Linus' reply on Git and SHA-1 collision by newjersey on Friday February 24, 2017 @01:48PM (#13726425)
The quote for those who didn't read the email. Linus Torvalds says:

> Do we want to migrate to another hash? Yes.

[ Parent | on HN ]