Volume XXII, number 279Tuesday, October 6, 2026Latest message 15 minutes ago

The Git List

News and archive of git@vger.kernel.org, since April 2005

Discussion

Chacon's signed SHA-256 tree digest reopens the question of SHA-256 as the Git 3.0 default

An RFC that would add an independent tree hash to signed commits and tags has turned into a debate over whether the 3.0 default should move to SHA-256 at all.

Scott Chacon posted an RFC that would put a SHA-256 digest of a commit's tree into signed objects without a SHA-256 repository. Brian m. carlson and Patrick Steinhardt pushed back on the premise that the 3.0 default should be reconsidered.