On Thu, Sep 11, 2014 at 11:19 AM, Stephan Beal <sgb...@googlemail.com> wrote: > No, he can't. Well, he can, but he will break the hashes of other records, > so any tamping will be noticed. Specifically, the Z- and R-cards detect any > sort of tampering.
Right. He can. If you've not pushed the commits anywhere else before the attack, and if you've not signed them, and if no one has pulled the commits elsewhere before the attack, then you can't detect it. _______________________________________________ fossil-users mailing list fossil-users@lists.fossil-scm.org http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users