News for hackers. Stuff that matters.
Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by layer8 on Thursday October 01, 2026 @03:56PM (#49926316)
This is exactly right. A signature is only worth as much as the hash that it’s signing. And all the usual signature algorithms are signing a hash.

There are no comments on this comment yet.