Re: Git and SHA-1 security (again)

From: Duy Nguyen <pclouds@gmail.com>
Date: Jul 18, 2016, 16:51 UTC
Message-ID: <CACsJy8AH9Q6rOgvcWGsLGPaP96koGA=k0PYgXP6F3RZ=XAwaSw@mail.gmail.com>
In-Reply-To: <20160717142157.GA6644@vauxhall.crustytoothpaste.net>

On Sun, Jul 17, 2016 at 4:21 PM, brian m. carlson <sandals@crustytoothpaste.net> wrote:

> I'm going to end up having to do something similar because of the issue
> of submodules.  Submodules may still be SHA-1, while the main repo may
> be a newer hash.

Or even the other way around, main repo is one with sha1 while submodule is on sha256. I wonder if we should address this separately (and even in parallel with sha256 support), making submodules work with an any external VCS system (that supports some basic operations we define).

-- 
Duy

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.