It seems like SHA1 has been deprecated a long time ago. So why do people still not use SHA256 for new repos?

  • slazer2au
    link
    fedilink
    English
    arrow-up
    38
    ·
    6 months ago

    Because the git commit hash is not suppose to be used as a security measure, just a identification measure.

  • Bricked@feddit.org
    link
    fedilink
    arrow-up
    15
    ·
    6 months ago

    What do you mean by “use SHA1 for Git”? Are you referring to commit hashes? They probably don’t have any security implications that would warrant a stronger hash