c/asklemmy · by asudox@lemmy.asudox.dev · 96dWhy do the majority of projects still use SHA1 for Git commit hashes? It seems like SHA1 has been deprecated a long time ago. So why do people still not use SHA256 for new repos? 15 points · 5 comments · view on lemmy.world
5 Comments
slazer2au@lemmy.world · 38 pts · 96d
Because the git commit hash is not suppose to be used as a security measure, just a identification measure.
LodeMike@lemmy.today · 6 pts · 96d
Sha1 is still secure for this use too. Both preimage properties remain unbroken.
bricked@feddit.org · 15 pts · 96d
What do you mean by "use SHA1 for Git"? Are you referring to commit hashes? They probably don't have any security implications that would warrant a stronger hash
asudox@lemmy.asudox.dev · 5 pts · 96d
yes. commit hashes. fixed the title.
irelephant@lemmy.dbzer0.com · 1 pts · 83d
It's the default, and iirc git only uses SHA-1 for id stuff.