It seems like SHA1 has been deprecated a long time ago. So why do people still not use SHA256 for new repos?

top 2 comments

sorted by: hot top controversial new old
[–] 38 points 6 months ago (1 child)

Because the git commit hash is not suppose to be used as a security measure, just a identification measure.

  • source
  • hideshow 1 child comment