From: Nicolas Pitre <nico@cam.org>
Date: Tue, 29 Apr 2008 17:55:32 GMT
Subject: Re: About git and the use of SHA-1
Message-ID: <alpine.LFD.1.10.0804291352120.23581@xanadu.home>
In-Reply-To: <7f9d599f0804291048n2c706f3amdf159ffe86bdbc8@mail.gmail.com>

On Tue, 29 Apr 2008, Geoffrey Irving wrote:

> Sorry for the confusion: it would handwaving if I was saying git was insecure,
> but I'm not.  I'm saying that if or when SHA1 becomes vulnerable to collision
> attacks, git will be insecure.

Right.  And if or when that happens then we'll make Git secure again 
with a different hash.  In the mean time there is low return for the 
effort involved.


Nicolas