From: Nico Williams <nico@cryptonector.com>
Date: Mon, 24 Nov 2014 18:14:34 GMT
Subject: Re: How safe are signed git tags? Only as safe as SHA-1 or somehow safer?
Message-ID: <CAK3OfOgko5Fb5FMGCKw3+12fAzMVEHuUriaiBNGi8nb28bNTQA@mail.gmail.com>
In-Reply-To: <20141117212657.GC15880@peff.net>

Is there a plan for upgrading to a better hash function in the future?
 (E.g., should it become an urgent need.)

What are the roadblocks to adoption of a replacement hash function?
Just documenting this would go a long way towards making it possible
to upgrade some day.

Thanks,

Nico
--