SHA-1 'fully and practically broken' by new collision (2020)
Git was created 16 years ago. The impending breakage of SHA-1 was known even at that time, just like how MD5 had been broken before it.<p>I&#x27;m honestly still shocked that updating the hashing algorithm wasn&#x27;t built into Git from day one. I really wonder why. Did people think this wouldn&#x27;t happen? Were they so in love with the performance of C&#x2F;C++ being able to pass around 20 byte hashes on the stack without worrying about a more complicated structure (eg a collection of variable length hashes)?<p>It just seems like such a massive and foreseeable oversight that&#x27;s going to cause pain for some time to come for really no reason at all.