git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [RFC] Authenticate push via PGP signature, not SSH

From
Pierre Habouzit <madcoder@debian.org>
Date
Jan 28, 2008, 08:48 UTC
Message-ID
<20080128084830.GB15935@artemis.madism.org>
In-Reply-To
<479D5611.4010205@vilain.net>
On Mon, Jan 28, 2008 at 06:12:34AM +0000, Sam Vilain wrote:
Show 6 quoted lines
> This does force potential contributors to get PGP keys, and get them
> signed - but that seems to me to be a reasonable barrier of entry and
> may even help drive some PGP adoption.
> 
> Remember this is a proof of concept, so let's discuss the design first
> and not worry too much about the glaring bugs yet.
  FWIW I'm really interested into such a "thing", and that I'd like to
avoid giving unix (even with git-shell, not only because of security,
but because it pollutes the machine setup a lot) accounts to my git
servers, though would like to let people help in my Debian packaging.
Fors us GPG isn't an issue, as every single DD or wannabe has a GPG key
:)
  Note though that the fact that you need to push a dummy tag is somehow
disgusting IMHO, it should at least be integrated into git-push so that
the user doesn't have to generate the dummy tag himself.
-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org
Previous: Sam Vilain
Message 21 of 21 in “[RFC] Authenticate push via PGP signature, not SSH”
  1. Sam VilainJan 28, 2008
  2. Shawn O. PearceJan 28, 2008
  3. Jan HudecJan 28, 2008
  4. Sam VilainJan 28, 2008
  5. Shawn O. PearceJan 29, 2008
  6. Shawn O. PearceJan 29, 2008
  7. Pierre HabouzitJan 29, 2008
  8. Shawn O. PearceJan 30, 2008
  9. Sam VilainJan 30, 2008
  10. Shawn O. PearceJan 30, 2008
  11. Pierre HabouzitJan 30, 2008
  12. Sam VilainJan 30, 2008
  13. Johannes SixtJan 30, 2008
  14. Shawn O. PearceJan 31, 2008
  15. Pierre HabouzitJan 30, 2008
  16. Shawn O. PearceJan 31, 2008
  17. Pierre HabouzitJan 31, 2008
  18. Sam VilainJan 30, 2008
  19. Shawn O. PearceJan 30, 2008
  20. Sam VilainJan 31, 2008
  21. Pierre HabouzitJan 28, 2008

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.