From owner-freebsd-current@freebsd.org Wed Sep 2 16:15:21 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id EB9583DB907; Wed, 2 Sep 2020 16:15:21 +0000 (UTC) (envelope-from dim@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4BhTYj5xN3z3RVT; Wed, 2 Sep 2020 16:15:21 +0000 (UTC) (envelope-from dim@FreeBSD.org) Received: from tensor.andric.com (tensor.andric.com [IPv6:2001:470:7a58:1::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "tensor.andric.com", Issuer "Let's Encrypt Authority X3" (verified OK)) (Authenticated sender: dim) by smtp.freebsd.org (Postfix) with ESMTPSA id 96DD524FD2; Wed, 2 Sep 2020 16:15:21 +0000 (UTC) (envelope-from dim@FreeBSD.org) Received: from [IPv6:2001:470:7a58::1da0:87b4:f6b8:83b0] (unknown [IPv6:2001:470:7a58:0:1da0:87b4:f6b8:83b0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by tensor.andric.com (Postfix) with ESMTPSA id 3046A48ED6; Wed, 2 Sep 2020 18:15:19 +0200 (CEST) From: Dimitry Andric Message-Id: <0F7C95D8-08A3-4FC7-9D29-D5082355D756@FreeBSD.org> Content-Type: multipart/signed; boundary="Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.15\)) Subject: Re: Plans for git (was: Please check the current beta git conversions) Date: Wed, 2 Sep 2020 18:15:10 +0200 In-Reply-To: Cc: Mathieu Arnold , grarpamp , FreeBSD Current , freebsd-git@freebsd.org To: Ed Maste References: <20200902045939.GA15897@eureka.lemis.com> <20200902115055.hen6uwjjmqsdmaby@aching.in.mat.cc> X-Mailer: Apple Mail (2.3445.104.15) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Sep 2020 16:15:22 -0000 --Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On 2 Sep 2020, at 17:18, Ed Maste wrote: >=20 > On Wed, 2 Sep 2020 at 07:51, Mathieu Arnold wrote: >>=20 >>> Git also supports sha-256 soon now, adoption should >>> be researched from various online article series and >>> work product before committing plans... >>> https://lwn.net/Articles/823352/ >>> https://git-scm.com/docs/hash-function-transition >>=20 >> "soon now" seems a bit vague, from what I have read on the subject, >> whilst the local repository operations are working with SHA256 = hashes, >> it is still lacking remote transport, clones, and such. >=20 > Yes, Git will migrate to SHA256 but will not be completely finished > sufficiently soon to matter for our needs. We'll eventually deal with > the migration the same way as everyone else. Note that Subversion *also* uses SHA1, and has suffered from hash collisions. Which at some point broke the WebKit repository, because somebody thought it was fun to tweak two PDF files to have exactly the same SHA1. This is why Subversion added a few hook scripts to prevent adding such files: = https://svn.apache.org/viewvc/subversion/trunk/tools/hook-scripts/reject-k= nown-sha1-collisions.sh?view=3Dmarkup = https://svn.apache.org/viewvc/subversion/trunk/tools/hook-scripts/reject-d= etected-sha1-collisions.sh?view=3Dmarkup -Dimitry --Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.2 iF0EARECAB0WIQR6tGLSzjX8bUI5T82wXqMKLiCWowUCX0/FDwAKCRCwXqMKLiCW o8BaAKCCHT3JbL1hDF8ZPjVc4xVLCYjz/wCg3imoxXFp+JRfrs530UK5EfLHyLE= =aFzd -----END PGP SIGNATURE----- --Apple-Mail=_B2FD4671-CC79-4681-B412-3B4E45C9BDC2--