git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [RFC/PATCH] verify-tag: check sig of all tags to given object

From
Junio C Hamano <gitster@pobox.com>
Date
Feb 4, 2012, 05:22 UTC
Message-ID
<7vsjirjhp7.fsf@alter.siamese.dyndns.org>
In-Reply-To
<20120204050818.GA2477@tgrennan-laptop>
Tom Grennan <tmgrennan@gmail.com> writes:
> Wouldn't you want Shawn and Jeff to tag the object (commit, tree, or
> blob) that you had tagged?
No.

We _designed_ our tag objects so that they are capable of pointing at another tag, not the object that is pointed at that other tag. And that is the example usage I gave you.

The statement by Shawn and Jeff, "This tag is Gitster's" is exactly that. It was not about asserting the authenticity of the commit. It was about the tag object I created.

>    gitster$ git verify-tag --pointed v1.7.10
>    tag v1.7.10: OK

Just saying "$name: OK" will *never* be acceptable. "A signature made by any key in my keychain is fine" is not the usual use case. At least the output needs to be "Good signature from X".

Previous: Tom GrennanNext: Tom Grennan
Message 5 of 8 in “verify-tag: check sig of all tags to given object”
  1. verify-tag: check sig of all tags to given objectTom Grennan, Feb 4, 2012
  2. Junio C HamanoFeb 4, 2012
  3. Junio C HamanoFeb 4, 2012
  4. Tom GrennanFeb 4, 2012
  5. Junio C HamanoFeb 4, 2012
  6. Tom GrennanFeb 4, 2012
  7. Junio C HamanoFeb 4, 2012
  8. Tom GrennanFeb 4, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.