git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Signed push progress?

From
Robin H. Johnson <robbat2@gentoo.org>
Date
Sep 28, 2011, 07:50 UTC
Message-ID
<20110928075054.GA13727@orbis-terrarum.net>

I haven't seen anything about the status of signed push since earlier in the month, even the what's cooking report marked it as stalled.

While I'd previously noted my concerns re the use of SHA1, that's not presently a solvable problems, whereas signed-push does improve security today.

Additionally, in the ever ongoing discussion about Gentoo's conversion from CVS to Git (we're very close now), we've decided that the signed pushes will provide better security than our plan of previous plan of using signed notes, so we'd like to see signed pushes succeed.

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Next: Junio C Hamano
Message 1 of 4 in “Signed push progress?”
  1. Robin H. JohnsonSep 28, 2011
  2. Junio C HamanoSep 28, 2011
  3. What's next for "signed push"?Junio C Hamano, Sep 29, 2011
  4. Dmitry IvankovSep 29, 2011

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.