Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Sep 2020 18:15:10 +0200
From:      Dimitry Andric <dim@FreeBSD.org>
To:        Ed Maste <emaste@freebsd.org>
Cc:        Mathieu Arnold <mat@freebsd.org>, grarpamp <grarpamp@gmail.com>, FreeBSD Current <freebsd-current@freebsd.org>, freebsd-git@freebsd.org
Subject:   Re: Plans for git (was: Please check the current beta git conversions)
Message-ID:  <0F7C95D8-08A3-4FC7-9D29-D5082355D756@FreeBSD.org>
In-Reply-To: <CAPyFy2Cd33ytLcE8dF-nQ2MPymNyc0WtdX6TSb8ATuv3L%2Bw8PA@mail.gmail.com>
References:  <CAPyFy2CTTecRJDnXNvF%2BM2%2BaLWJpA%2BEdG43ZeU3qwsCruecoFA@mail.gmail.com> <20200902045939.GA15897@eureka.lemis.com> <CAD2Ti28fn99=SSKXRHFkMrNvYJVTpbDVBi%2B6A3vwRrb=VgE_ew@mail.gmail.com> <20200902115055.hen6uwjjmqsdmaby@aching.in.mat.cc> <CAPyFy2Cd33ytLcE8dF-nQ2MPymNyc0WtdX6TSb8ATuv3L%2Bw8PA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

On 2 Sep 2020, at 17:18, Ed Maste <emaste@freebsd.org> wrote:
>=20
> On Wed, 2 Sep 2020 at 07:51, Mathieu Arnold <mat@freebsd.org> wrote:
>>=20
>>> Git also supports sha-256 soon now, adoption should
>>> be researched from various online article series and
>>> work product before committing plans...
>>> https://lwn.net/Articles/823352/
>>> https://git-scm.com/docs/hash-function-transition
>>=20
>> "soon now" seems a bit vague, from what I have read on the subject,
>> whilst the local repository operations are working with SHA256 =
hashes,
>> it is still lacking remote transport, clones, and such.
>=20
> Yes, Git will migrate to SHA256 but will not be completely finished
> sufficiently soon to matter for our needs. We'll eventually deal with
> the migration the same way as everyone else.

Note that Subversion *also* uses SHA1, and has suffered from hash
collisions. Which at some point broke the WebKit repository, because
somebody thought it was fun to tweak two PDF files to have exactly the
same SHA1.

This is why Subversion added a few hook scripts to prevent adding such
files:

=
https://svn.apache.org/viewvc/subversion/trunk/tools/hook-scripts/reject-k=
nown-sha1-collisions.sh?view=3Dmarkup
=
https://svn.apache.org/viewvc/subversion/trunk/tools/hook-scripts/reject-d=
etected-sha1-collisions.sh?view=3Dmarkup

-Dimitry


--Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.2

iF0EARECAB0WIQR6tGLSzjX8bUI5T82wXqMKLiCWowUCX0/FDwAKCRCwXqMKLiCW
o8BaAKCCHT3JbL1hDF8ZPjVc4xVLCYjz/wCg3imoxXFp+JRfrs530UK5EfLHyLE=
=aFzd
-----END PGP SIGNATURE-----

--Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0F7C95D8-08A3-4FC7-9D29-D5082355D756>