Re: Tags
- From
- H. Peter Anvin <hpa@zytor.com>
- Date
- Jul 1, 2005, 16:37 UTC
- Message-ID
- <42C5714A.1020203@zytor.com>
- In-Reply-To
- <m13bqyk4uh.fsf_-_@ebiederm.dsl.xmission.com>
Eric W. Biederman wrote:
Show 30 quoted lines
> "H. Peter Anvin" <hpa@zytor.com> writes: > > >>In the end, it might be that the right thing to do for git on kernel.org is to >>have a single, unified object store which isn't accessible by anything other >>than git-specific protocols. There would have to be some way of dealing with, >>for example, conflicting tags that apply to different repositories, though. > > > As far as I can tell public distributed tags are not that hard and if > you are going to be synching them it is probably worth working on. > > The basic idea is that instead of having one global tag of > 'linux-2.6.13-rc1' you have a global tag of > 'torvalds@osdl.org/linux-2.6.13-rc1'. > > The important part is that the tag namespace is made hierarchical > with at least 2 levels. Where the top level is a globally > unique tag owner id and the bottom level is the actual tag. This > prevents collisions when merging trees because two peoples > tags are never in the same namespace, as least when > people are not actively hostile :) > > Still being a complete git dummy I think the trivial mapping is > to put tags in: > .git/refs/tags/user@domain/tag > and then have a symlink at: > .git/TAGS > that points to your default directory of tags. >
Unless you have an authentication mechanism and *enforce* it (you can do that with GPG signatures if *and only if* your disambiguation includes your GPG signature fingerprint) you still have a problem with someone introducing fake tags as a DoS attack.
-hpa