SHA1 collisions and the resource management

If there’s no attack vector I’d also like to ask to avoid this.
We have cleaned things up before moving to Google Cloud but in peak times we already had about 1.2 million resources and migration of that stuff is tricky to say the least :wink:
So if there’s a security risk at some point I’d say go for it and everyone just has to make sure the upgrade works but if it’s just something that could theoretically happen I’d avoid it since it can potentially create a huge workload for some projects.

1 Like