[Tails-dev] git (submodule) security

Üzenet törlése

Válasz az üzenetre
Szerző: Patrick Schleizer
Dátum:  
Címzett: Whonix-devel, freepto@autistici.org >> Everything about freepto, The Tails public development discussion list, boyska
Tárgy: [Tails-dev] git (submodule) security
Hi!

By chance I found https://github.com/boyska/git-verify repo.

At Whonix we're currently discussing various aspects of git security.
Especially since git still uses SHA-1 and if git (submodule)
verification is safe against adversaries, that can produce SHA-1 collisions.

I was wondering, if you might be interested to join the discussion? [1]

Cheers,
Patrick

[1] https://www.whonix.org/forum/index.php/topic,538.0.html