[Whonix-devel] git (submodule) security

[Patrick Schleizer]

Hi!

By chance I found https://github.com/boyska/git-verify repo.

At Whonix we're currently discussing various aspects of git security.
Especially since git still uses SHA-1 and if git (submodule)
verification is safe against adversaries, that can produce SHA-1 collisions.

I was wondering, if you might be interested to join the discussion? [1]

Cheers,
Patrick

[1] https://www.whonix.org/forum/index.php/topic,538.0.html