Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff

[Robert Collins]

On Fri, 2003-12-26 at 13:19, James Blackwell wrote:
> In lists.arch.users, you wrote:
> >
> >     > From: Miles Bader <address@hidden>
> >
> >     > I tried signing a commit, and ... ooh, it works!
> >
> > You tease.
> >
> 
> I heard a nasty rumor from Bob that mirrors aren't signed. 

If you mean me, I prefer Rob/Robert. And mirrors are signed - with the
uploaders signature for now, and as Tom says more flexible stuff to
come.

> Is that by design? I would have expected that when I mirrored everyone's
> archive, their signature would go with their patches to prove I haven't
> tampered with anybody's work.

Please revisit the 2 design drafts Tom put out a fortnight ago, and the
surrounding discussion. It's all detailed there. In short, 'to be done'.

Rob
-- 
GPG key available at: <http://www.robertcollins.net/keys.txt>.

signature.asc
Description: This is a digitally signed message part