ansgar@43-1.org wrote: >In addition it reintroduces trust in weak cryptographic hashes which >effort was spent to remove. While SHA-1 is generally deprecated, it is not "weak" in the way that it is used by git so I do not believe that this is a valid argument. -- ciao, Marco