On Tue, May 22, 2012 at 12:27:49PM -0700, Andreas Kupries wrote:
> On 5/22/2012 11:28 AM, Lluís Batlle i Rossell wrote:
> >Monotone can sign any given commit without 'changing' it, and I'd expect 
> >fossil
> >to be able to do something similar.
> >
> >I felt the need of signing in fossil after a friend showed me this article:
> >http://mikegerwitz.com/docs/git-horror-story.html
> 
> Some discussion about the article is at
>       http://news.ycombinator.com/item?id=4007229

Yes, and there also appears a bit of discussion on "what to sign".

We may want to sign, among some:
- The tree of files of a specific checkin (signing the checkin hash is enough)
- The tree + comment + date + tags... that would mean a set of artifacts.

I think the most flexible operation would be to sign a set of artifacts, but
I've no idea how that can later be workable as in checking signatures.

The monotone people have this part much better planned, I think. :)

Regards,
Lluís.
_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to