From: Hans Petter Selasky Date: Mon, 16 Jan 2023 07:23:56 GMT Subject: Re: Gitorious should use CRC128 / 256 / 512 instead of SHA-1 Message-ID: <3b0af57c-a144-b0e4-d353-6028b3939291@selasky.org> In-Reply-To: On 1/15/23 00:59, brian m. carlson wrote: > However, Git is moving in the direction of stronger cryptographic > algorithms, rather than insecure hashing algorithms. I don't think your > proposal is a good idea, nor do I think it's likely to be adopted. I disagree. There is no need for signing in a version control system. It just makes it harder to change things, like the right-to-repair. In my eyes there is a high chance of abuse, by vendors that do no want others to flash or edit their device firmwares. --HPS