search for: 9392365

Hi all, Since the vault for 7.3.1611 has been cleared out last sunday (20170207) - why is that? - I'm using git to download a "SRPM", or more accurately, its contents. However, using git has one major drawback: It is missing checksums for the files. Are there any plans to provide checksums for the files in git so I can be sure that what I download is actually not tampered with?

...own. We're basically at the same place now with SHA-1 as we were in 2010 with MD5. The full paper can be read at https://shattered.io/static/shattered.pdf And an interesting discussion on git's potential handling of a SHA-1 collision on a blob is at https://stackoverflow.com/questions/9392365/how-would-git-handle-a-sha-1-collision-on-a-blob It may not be urgent, but it's not ridiculous.

...he same place now with SHA-1 > as we were in 2010 with MD5. > > The full paper can be read at https://shattered.io/static/shattered.pdf > > And an interesting discussion on git's potential handling of a SHA-1 > collision on a blob is at > https://stackoverflow.com/questions/9392365/how-would-git-handle-a-sha-1-collision-on-a-blob > > > It may not be urgent, but it's not ridiculous. > I think the issue is that you not only have to create a trojan file that matches the same hash, but you have to create a trojan file that matches the same hash and doesn't...