Am Dienstag 07 April 2009 10:28:30 schrieb Daniel Cheng: > >> > > git tag -s <name> <commit> -m <message> > > Can you also sign a revision without tagging it? > > No. > In DVCS model, signing single revision does not make sense > -- since you will merge / rebase that revision as soon as it is merged.
I think it does make sense as long as you don't rewrite history. Every signed revision is a certified step on the way, but the signature is only relevant to automatic verification tools, not to users - except where a tag gets signed and the users want to be sure by whom the tag was created. Signed tags for each verified revision create quite much unnecessary noise. But since the decision is now set, that freenet will switch to git and lose history (ouch!), someone else will have to write the verification framework. Doing it in Mercurial is quite simple (I sketched one in my analog notebook while in on sunday), but I know far too little about git to try to do something similar there. Best wishes, Arne -- -- Ein W?rfel System: http://1w6.org - einfach saubere (Rollenspiel-) Regeln. -- Infinite Hands: http://infinite-hands.draketo.de - singing a part of the history of free software. -- My stuff: http://draketo.de - stories, songs, poems, programs and stuff :) -- PGP/GnuPG: http://draketo.de/inhalt/ich/pubkey.txt -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part. URL: <https://emu.freenetproject.org/pipermail/devl/attachments/20090414/2df54e2a/attachment.pgp>
