From: Robin Rosenberg <robin.rosenberg.lists@dewire.com>
Date: Wed, 23 Apr 2008 08:47:41 GMT
Subject: Re: What's cooking in git.git (topics)
Message-ID: <200804231047.41315.robin.rosenberg.lists@dewire.com>
In-Reply-To: <alpine.WNT.1.10.0804231124270.2728@theodor>

onsdagen den 23 april 2008 09.47.57 skrev Fedor Sergeev:
> If one manages to hack on repository one can modify it enormous amount of
> ways, including spoofing on SHA (providing wrong contents for it - does
> git verify that when getting a pack?), utilizing bugs in git etc...

The pack transfer protocol does not transfer the SHA of objects, only the 
contents is transferred. The SHA-1 is (has to be since it is not sent) 
reconstructed on the receiving end.

-- robin