Hacker News Reader

Things changed since 2007

Thanks. (More detail: Git added signed commits in Git 1.7.9, which was released in 2012.)

How they changed?

For all practical purpose SHA-1 is a bad hash function, it's slow, it's insecure.

If SHA-1 is not a security measure, why do you even sign the commit. It doesn't make any sense. You give a strong signature on something weak.

Well they didn't sign commits in 2007, and there wasn't github in 2007, so it wasn't a security measure in 2007.

Buddy, you are naming the things that changed.