SHA-1 vs SHA-256

[jflaherty]

Have you thought of using SHA-256 since Git is pretty close to switching to SHA-256 in the near future due to collisions found in the wild?

[thblt]

This is a good idea, especially since even git's algorithm isn't sha1 anymore, but for a toy implementation I think it's best to wait until git itself has achieved its transition to the new hash algorithm. For now, I'd rather be widely compatible than cryptographically secure.

I'm leaving the issue open until then.

Thanks!