Re:Git 3.0's upcoming SHA-256 default will be a costly mistake
by kazinator on Friday October 02, 2026 @08:31AM
(#49932758)
You are not saying anything other than that hashes are useful for signing. When you communicate to someone that you trust such and such a hash, and they should too, you are informally certifying the hash, the cryptographically formal way to do which is to sign it.
[ Parent
| on HN ]
Re:Git 3.0's upcoming SHA-256 default will be a costly mistake
by lxgr on Friday October 02, 2026 @08:50AM
(#49932949)
> You are not saying anything other than that hashes are useful for signing.
Yes, but you seem to be saying they are not, or maybe just that git hashes are somehow inherently not capable of taking that role, unless I'm misunderstanding.