On: Whatever happened to SHA-256 support in Git

[bawolff]

I was just going on its a lot harder to trick a human in a text format. Most collisions involve a bunch of binary data that isn't valid utf-8, which looks very conspicious in a text file.

[layer8 → bawolff]

You can do a lot with various whitespace characters, see for example https://github.com/not-an-aardvark/lucky-commit.

[bawolff → layer8]

Oh definitely, but doing that (bruteforcing using only whitespace) for all 160 bits of sha-1 is way beyond our capability.