Re: SHA1 collisions found
- From
Junio C Hamano <gitster@pobox.com>
- Date
- Feb 24, 2017, 19:20 UTC
- Message-ID
- <xmqq7f4f4cqg.fsf@gitster.mtv.corp.google.com>
- In-Reply-To
- <CAGZ79kaZWe-8pMZnQv7uZtr8wXWawFeJjUa68-b0oa4yFo-HcA@mail.gmail.com>
Stefan Beller <sbeller@google.com> writes:
Show 14 quoted lines
> On Fri, Feb 24, 2017 at 10:14 AM, Junio C Hamano <gitster@pobox.com> wrote: > >> you are inviting people to start using >> >> md5,54ddf8d47340e048166c45f439ce65fd >> >> as object names. > > which might even be okay for specific subsets of operations. > (e.g. all local work including staging things, making local "fixup" commits) > > The addressing scheme should not be too hardcoded, we should rather > treat it similar to the cipher schemes in pgp. The additional complexity that > we have is the longevity of existence of things, though.
The not-so-well-hidden agenda was exactly that we _SHOULD_ not mimick PGP. They do not have a requirement to encourage everybody to use the same thing because each message is encrypted/signed independently, i.e. they do not have to chain things like we do.