First, there isn't as far as I know any 'known preimage' attack
against SHA-1, and only that would truly matter for Git.
Second, this issue was discussed in depth in the past; check git
mailing list archives, please...
--
Jakub Narebski
Poland
ShadeHawk on #git
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html