RE: Check SHA vs Content (was: RE: svn commit: r1759233 - /subversion/trunk/subversion/libsvn_wc/questions.c)

Hi,

> -----Original Message-----
> From: Stefan Sperling [mailto:stsp_at_elego.de]
> Sent: Tuesday, April 04, 2017 12:19 PM
> To: Daniel Shahaf
> Cc: dev_at_subversion.apache.org
> Subject: Re: Check SHA vs Content (was: RE: svn commit: r1759233 -
> /subversion/trunk/subversion/libsvn_wc/questions.c)
>
> On Tue, Apr 04, 2017 at 10:00:31AM +0000, Daniel Shahaf wrote:
> > Note that we can still do what rep-cache now does: treat equality of
> > checksums as a sensitive but not specific test for bit-for-bit
> > equality; that is: checksum the file, and if the resulting value is
> > equal to the stored value, do a full-text comparison too.
>
> Yeah, that sounds OK.

INHO, it's also still sensible to use SHA1 (or even MD5) as a "technical" checksum to protect against problems like transmission errors, storage failure, random bit flips or accidental changing of pristine copies.

It's just that we must not use SHA1 as a sole means of identifying content or content identity.

Best regards

Markus Schaber

CODESYS® a trademark of 3S-Smart Software Solutions GmbH

Inspiring Automation Solutions

3S-Smart Software Solutions GmbH
Dipl.-Inf. Markus Schaber | Product Development Core Technology
Memminger Str. 151 | 87439 Kempten | Germany
Tel. +49-831-54031-979 | Fax +49-831-54031-50

E-Mail: m.schaber@codesys.com | Web: http://www.codesys.com | CODESYS store: http://store.codesys.com
CODESYS forum: http://forum.codesys.com

Managing Directors: Dipl.Inf. Dieter Hess, Dipl.Inf. Manfred Werner | Trade register: Kempten HRB 6186 | Tax ID No.: DE 167014915

This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received
this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorised copying, disclosure
or distribution of the material in this e-mail is strictly forbidden.
Received on 2017-04-04 15:17:43 CEST