News for hackers. Stuff that matters.

A comment on What does a PGP signature on a Git commit prove?.

Re:What does a PGP signature on a Git commit prove? by waynesonfire on Tuesday March 30, 2021 @10:18PM (#26642843)
> Obligatory note: sha1 is not considered sufficiently strong for hashing purposes these days, and this is widely acknowledged by the git development community. Significant efforts are under way to migrate git to stronger cryptographic hashes

Ops, forgot to add a tag to your hash algorithm?

[ Parent | on HN ]

There are no comments on this comment yet.