{"thread":{"id":"5977","subject":"Re: Signed git-tag doesn't find default key","startedAt":"2006-10-21T00:52:08Z","lastAt":"2007-01-15T13:14:50Z","messageCount":3,"participants":["Horst H. von Brand","Andy Parkins"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"29451","messageId":"200610210052.k9L0q88T005342@laptop13.inf.utfsm.cl","threadId":"5977","inReplyTo":"andyparkins@gmail.com","subject":"Re: Signed git-tag doesn't find default key","fromName":"Horst H. von Brand","fromEmail":"vonbrand@inf.utfsm.cl","sentAt":"2006-10-21T00:52:08Z","receivedAt":"2006-10-21T00:52:08Z","isPatch":false,"sender":{"key":"vonbrand@inf.utfsm.cl","avatar":"https://avatars.githubusercontent.com/u/211384?v=4"},"body":"Andy Parkins <andyparkins@gmail.com> wrote:\n\n[...]\n\n> I'm going to advocate my change of only searching on the email address\n> for finding the key - there shouldn't be two keys with the same email\n> address anyway, so there shouldn't be a danger of ambiguity of key.\n\nThere very well might be... say you have a key for signing git stuff,\nanother one for emailing, another one for signing RPMs you create, ... I\nbelieve that is the idea of the GPG comment field, precisely.\n-- \nDr. Horst H. von Brand                   User #22616 counter.li.org\nDepartamento de Informatica                    Fono: +56 32 2654431\nUniversidad Tecnica Federico Santa Maria             +56 32 2654239\nCasilla 110-V, Valparaiso, Chile               Fax:  +56 32 2797513\n"},{"id":"29470","messageId":"200610210844.46184.andyparkins@gmail.com","threadId":"5977","inReplyTo":"200610210052.k9L0q88T005342@laptop13.inf.utfsm.cl","subject":"Re: Signed git-tag doesn't find default key","fromName":"Andy Parkins","fromEmail":"andyparkins@gmail.com","sentAt":"2006-10-21T07:44:39Z","receivedAt":"2006-10-21T07:44:39Z","isPatch":false,"sender":{"key":"andyparkins@gmail.com","avatar":null},"body":"On Saturday 2006, October 21 01:52, Horst H. von Brand wrote:\n\n> There very well might be... say you have a key for signing git stuff,\n> another one for emailing, another one for signing RPMs you create, ... I\n> believe that is the idea of the GPG comment field, precisely.\n\nEither way, you're arguing for the fault being with Git - which has no notion \nof comment fields and so won't find the key anyway.\n\nAndy\n\n-- \nDr Andrew Parkins, M Eng (Hons), AMIEE\nandyparkins@gmail.com\n"},{"id":"31726","messageId":"200701151314.l0FDEohv008222@laptop13.inf.utfsm.cl","threadId":"5977","inReplyTo":"andyparkins@gmail.com","subject":"Re: Commit signing","fromName":"Horst H. von Brand","fromEmail":"vonbrand@inf.utfsm.cl","sentAt":"2007-01-15T13:14:50Z","receivedAt":"2007-01-15T13:14:50Z","isPatch":false,"sender":{"key":"vonbrand@inf.utfsm.cl","avatar":"https://avatars.githubusercontent.com/u/211384?v=4"},"body":"Andy Parkins <andyparkins@gmail.com> wrote:\n\n[...]\n\n> The answer is: no, you can't put your 100+X commits in my repository\n> because I don't trust the person who wrote X of them.  It is paranoid,\n> and it is overkill, but it is also /my/ repository.  It might also be\n> that you are my employee and you will do as you are damn well told.\n\nThere is another angle to this: Currently, the \"Signed-off-by:\" lines give\nno reliable way of authenticating the origin of a patch, which is needed\nfor traceability of authorship (for which they were introduced in the first\nplace).\n-- \nDr. Horst H. von Brand                   User #22616 counter.li.org\nDepartamento de Informatica                    Fono: +56 32 2654431\nUniversidad Tecnica Federico Santa Maria             +56 32 2654239\nCasilla 110-V, Valparaiso, Chile               Fax:  +56 32 2797513\n"}]}