It seems like SHA1 has been deprecated a long time ago. So why do people still not use SHA256 for new repos?

you are viewing a single comment's thread
view the rest of the comments
[–] 38 points 6 months ago (1 child)

Because the git commit hash is not suppose to be used as a security measure, just a identification measure.

  • source
  • hideshow 1 child comment