SHA1 still seems pretty good for most purposes. It would be nice to see if git-evtag would work easily with timestamping.<p>(As I understand the writeup, it is ultimately just generating a longer&#x2F;securer hash of the entire tree&#x27;s contents rather than just SHA1s, and so the post-commit script <i>could</i> be as simple as &#x27;timestamp `git-evtag`&#x27;, but the compile failed on my system so I am unable to try it out personally.)