[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [task #4633] GPG-Signed Commits

From: Derek Price
Subject: Re: [task #4633] GPG-Signed Commits
Date: Fri, 23 Sep 2005 15:12:59 -0400
User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)

Mark D. Baushke wrote:

> What [connection method] option name do you suggest? :ext;sign=yes: ?

How about `SignCommits', with =(yes|no) becoming optional?

> I don't know if the GPG name needs to be present or not. Folks could use
> PGP or GPG or any other OpenPGP conformant program to get the job done,
> couldn't they?

Yes.  Good point.

> I'm not sure that verify makes sense as an administrator may want to do
> this kind of checking in a commitinfo trigger and base it on the web of
> trust for a given key rather just saying it was signed...

Another good point, and it will save work and make things easier to
customize at the same time.

RequireCommitSignatures=(yes|no) it is.


Derek R. Price
CVS Solutions Architect
Ximbiot <http://ximbiot.com>
v: +1 717.579.6168
f: +1 717.234.3125

reply via email to

[Prev in Thread] Current Thread [Next in Thread]