mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

comment

Browse source
This commit is contained in:
Joey Hess 2019-01-11 16:54:07 -04:00
parent 05de519d2c
commit d12f4db54d
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
doc/todo/option_to_add_user-specified_string_to_key/comment_3_1f028eb4d73516918a83959570180f0d._comment Normal file
View file

@ -0,0 +1,12 @@
[[!comment format=mdwn
username="joey"
subject="""comment 3"""
date="2019-01-11T20:52:31Z"
content="""
A very big problem with this idea is that it would defeat git-annex's
protections against a SHA1 collision attack against git, which rely
on keys not containing user-supplied data.
If this were implemented, annex.securehashesonly would need to prohibit use
of the resulting keys.
"""]]