{"thread":{"id":"66474","subject":"Hash function transition page links to hijacked domain","startedAt":"2026-10-06T14:49:19Z","lastAt":"2026-10-06T21:50:48Z","messageCount":3,"participants":["Mae Eckert","D. Ben Knoble","Junio C Hamano"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"554288","messageId":"164ef290-463c-4a7a-92d4-00a56aab71be@albellus.de","threadId":"66474","inReplyTo":null,"subject":"Hash function transition page links to hijacked domain","fromName":"Mae Eckert","fromEmail":"mae.eckert@albellus.de","sentAt":"2026-10-06T14:49:19Z","receivedAt":"2026-10-06T14:49:19Z","isPatch":false,"sender":{"key":"mae.eckert@albellus.de","avatar":null},"body":"Hello!\n\nI'm a mortal so I don't know how to contribute this fix myself, so I figured this might be the right place to ask.\n\nhttps://git-scm.com/docs/hash-function-transition (2.55.0) links to https://shattered.io (which used to be the SHA-1 paper), but now it's some cybersecurity editorial thing trying to ride off the SEO I assume.\n\nweb.archive.org caught the domain being parked in May 03 2026 at https://web.archive.org/web/20260503225438/https://shattered.io/\n\nThe last good snapshot seems to be at https://web.archive.org/web/20260207211148/https://shattered.io/, the link should be swapped out.\n\nCheers,\n\nMae\n\n\n"},{"id":"554308","messageId":"89f21a129df21b115d5faded2a74a8a5921d62cf.1791307032.git.ben.knoble@gmail.com","threadId":"66474","inReplyTo":"164ef290-463c-4a7a-92d4-00a56aab71be@albellus.de","subject":"[PATCH] doc: fix shattered.io link","fromName":"D. Ben Knoble","fromEmail":"ben.knoble@gmail.com","sentAt":"2026-10-06T17:17:19Z","receivedAt":"2026-10-06T17:17:19Z","isPatch":true,"sender":{"key":"ben.knoble@gmail.com","avatar":"https://avatars.githubusercontent.com/u/22802209?v=4"},"body":"Since we published this document the domain has been taken over and no\nlonger reflects the original content. Link to the last good Web Archive\nsnapshot so folks can still retrieve the SHAttered information.\n\nSuggested-by: Mae Eckert <mae.eckert@albellus.de>\nSigned-off-by: D. Ben Knoble <ben.knoble@gmail.com>\n---\n Documentation/technical/hash-function-transition.adoc | 3 ++-\n 1 file changed, 2 insertions(+), 1 deletion(-)\n\ndiff --git a/Documentation/technical/hash-function-transition.adoc b/Documentation/technical/hash-function-transition.adoc\nindex 241d2f763d..f6b38ddd50 100644\n--- a/Documentation/technical/hash-function-transition.adoc\n+++ b/Documentation/technical/hash-function-transition.adoc\n@@ -29,7 +29,8 @@ advantages:\n \n Over time some flaws in SHA-1 have been discovered by security\n researchers. On 23 February 2017 the SHAttered attack\n-(https://shattered.io) demonstrated a practical SHA-1 hash collision.\n+(https://web.archive.org/web/20260207211148/https://shattered.io/)\n+demonstrated a practical SHA-1 hash collision.\n \n Git v2.13.0 and later subsequently moved to a hardened SHA-1\n implementation by default, which isn't vulnerable to the SHAttered\n-- \n2.53.0\n\n\n"},{"id":"554341","messageId":"xmqq4ieycxc7.fsf@gitster.g","threadId":"66474","inReplyTo":"89f21a129df21b115d5faded2a74a8a5921d62cf.1791307032.git.ben.knoble@gmail.com","subject":"Re: [PATCH] doc: fix shattered.io link","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2026-10-06T21:50:48Z","receivedAt":"2026-10-06T21:50:48Z","isPatch":true,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"\"D. Ben Knoble\" <ben.knoble@gmail.com> writes:\n\n> Since we published this document the domain has been taken over and no\n> longer reflects the original content. Link to the last good Web Archive\n> snapshot so folks can still retrieve the SHAttered information.\n>\n> Suggested-by: Mae Eckert <mae.eckert@albellus.de>\n> Signed-off-by: D. Ben Knoble <ben.knoble@gmail.com>\n> ---\n>  Documentation/technical/hash-function-transition.adoc | 3 ++-\n>  1 file changed, 2 insertions(+), 1 deletion(-)\n>\n> diff --git a/Documentation/technical/hash-function-transition.adoc b/Documentation/technical/hash-function-transition.adoc\n> index 241d2f763d..f6b38ddd50 100644\n> --- a/Documentation/technical/hash-function-transition.adoc\n> +++ b/Documentation/technical/hash-function-transition.adoc\n> @@ -29,7 +29,8 @@ advantages:\n>  \n>  Over time some flaws in SHA-1 have been discovered by security\n>  researchers. On 23 February 2017 the SHAttered attack\n> -(https://shattered.io) demonstrated a practical SHA-1 hash collision.\n> +(https://web.archive.org/web/20260207211148/https://shattered.io/)\n> +demonstrated a practical SHA-1 hash collision.\n\nThanks.  Will queue.\n\n>  \n>  Git v2.13.0 and later subsequently moved to a hardened SHA-1\n>  implementation by default, which isn't vulnerable to the SHAttered\n\n"}]}