6 ms·

Ftr you can make repos with sha256 now. I wonder if signing sha-1 mitigates the threat of using an outdated hash.