Martin Ågren <martin.agren@xxxxxxxxx> writes: >> I think we should have either a new sha256 capability or a more >> generic hash-algo capability whose value can be set to sha256. >> Neither the connection initiators or the acceptors should talk >> in sha256 until both ends agreed to do so. > > I think we should, and I think we do. I haven't dug into the details, > but "object-format" looks like it's just that. Ah, Yes, my thinko. > Maybe instead of SHA-1 and SHA-256, this should talk about "whatever has > been negotiated through 'object-format', or SHA-1", similar to brian's > suggestion elsewhere. Yup, that would be wonderful. Thanks.