On 02/09/2017 03:12 PM, Johnny Hughes wrote: > The patch files are in git as text files, right? Why would you need > checksums of those? That is the purpose of git, right? > Not to stir up a hornets' nest, but how does Google's announcement at https://shattered.it affect this now? (Executive summary: Google has successfully produced two different PDF files that hash to the same SHA-1.) There is a whole paragraph on 'How is GIT affected?'