While a change set list (like the Nuget one) does display short SHA1, any commit link you click on is actually the full SHA1:
http://nuget.codeplex.com/SourceControl/changeset/a5557ecdb5b0728945e1ced8e7ae9983d7f3b4bc
So the information about the SHA1 is never lost.