69
Git 3.0's upcoming SHA-256 default will be a costly mistake
(blog.gitbutler.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 02 Oct 2026
69 points (91.6% liked)
Git
4842 readers
8 users here now
Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency.
Resources
Rules
- Follow programming.dev rules
- Be excellent to each other, no hostility towards users for any reason
- No spam of tools/companies/advertisements. It’s OK to post your own stuff part of the time, but the primary use of the community should not be self-promotion.
Git Logo by Jason Long is licensed under the Creative Commons Attribution 3.0 Unported License.
founded 3 years ago
MODERATORS
Very interesting. I taught git to students last year and was showing them the SHA256 option and the issues he's describing was pretty much what I was wondering about. If you force people to switch, with no intercompatibility, holy shit this is gonna be quite the clusterfuck!
What I'm taking away from this is that Linus was right from the get go : SHA1 isn't there for security, it's a really good algorithm for a hashtable's hash where we really want to avoid collisions. That's it.
If you're thinking it's safe because it used to be involved in security, you're a muppet.