News for hackers. Stuff that matters.

A comment on Git 3.0's upcoming SHA-256 default will be a costly mistake. Parent comment

Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by lxgr on Friday October 02, 2026 @09:06AM (#49933120)
Have you ever worked with large repositories? You really don't want to read every single byte from disk just for signing a commit if you can avoid it.
[ Parent | on HN ]
Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by kazinator on Friday October 02, 2026 @01:27PM (#49936143)
Then use a SHA256-based repo, and use the cheaper signing scheme.

For some people, an improved signing scheme over the SHA-1-linked repository format would meet their requirements based on their assessment of their security threats.

[ Parent | on HN ]
Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by Dylan16807 on Friday October 02, 2026 @01:50PM (#49936415)
> Then use a SHA256-based repo, and use the cheaper signing scheme.

The scheme you just called a "screw up"?

[ Parent | on HN ]