Re: [PATCH v2 0/6] extract algo information from signatures

From: Christian Couder <christian.couder@gmail.com>
Date: Jun 19, 2025, 13:37 UTC
Message-ID: <CAP8UFD28y7_AUGndCyPDTc0f0odufdTAW5vReM5pMGeCcAerYg@mail.gmail.com>
In-Reply-To: <aD4i7YhUnT5Kgew-@tapette.crustytoothpaste.net>

On Tue, Jun 3, 2025 at 12:17 AM brian m. carlson <sandals@crustytoothpaste.net> wrote:

>
> On 2025-05-26 at 10:33:08, Christian Couder wrote:

Show 10 quoted lines

> > brian m. carlson however replied that it would be better to show two
> > pieces of information instead of one: one for the hash algorithm and
> > one for the protocol.
>
> Actually, what I was saying is that we should have one for the hash
> algorithm that is used in the Git object.  I don't care about the hash
> algorithm used in OpenPGP, X.509, or OpenSSH (that is, whether it's
> signed with SHA-512 or SHA-256), but we can have multiple signatures in
> a single commit such that there's both a SHA-1 signature and a SHA-256
> signature.

Thanks for clarifying. I think that's what I implemented in v3 and v4.