On Tue, 29 Apr 2008, Geoffrey Irving wrote: > Sorry for the confusion: it would handwaving if I was saying git was insecure, > but I'm not. I'm saying that if or when SHA1 becomes vulnerable to collision > attacks, git will be insecure. Right. And if or when that happens then we'll make Git secure again with a different hash. In the mean time there is low return for the effort involved. Nicolas -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html