News for hackers. Stuff that matters.

A comment on Welp, there go my Git signatures. Parent comment

Re:Welp, there go my Git signatures by hdhzy on Wednesday October 25, 2017 @02:49PM (#15552986)
But isn't signing commits basically relying on SHA-1 values of tree and parent (this is what is signed ultimately [0])? That'd be the weakest link of the system.

[0]: https://news.ycombinator.com/item?id=10353456

[ Parent | on HN ]

There are no comments on this comment yet.