News for hackers. Stuff that matters.
Re:Go 1.21.6 Released by ratorx on Tuesday January 09, 2024 @07:01PM (#38934178)
> cryptographically unique

Git uses SHA1 which is pretty far from cryptographically secure. It’s unlikely that’s the sole reason for having a separate checksum database though.

Re:Go 1.21.6 Released by justinclift on Wednesday January 10, 2024 @08:53PM (#38946392)
Doing some searching around online, it seems like git introduced sha256 support several years ago.
Re:Go 1.21.6 Released by dharmab on Wednesday January 10, 2024 @10:35PM (#38947211)
Only for some local operations- git protocol still uses SHA-1 for compatibility with old clients, and existing SHA-1 objects in old repositories aren't converted.