Reports of SHA-1's demise are considerably exaggerated
Can anyone answer why exactly this makes Git vulnerable?<p>I was under the impression the use of SHA1 was only for hashing and not for a security signature. And what would be the benefit of intentionally causing a collision? Would it cause some sort of DoS like someone else here mentioned?