Re: tag2upload (git-debpush) service architecture - draft

[Rebecca N. Palmer]

As a way to avoid relying on SHA-1, would it work to have git-debpush 
include a longer hash in the tag message, and tag2upload also verify 
that hash?