Re: [PATCH v3 0/4] Signed push
- From
Sverre Rabbelier <srabbelier@gmail.com>
- Date
- Sep 10, 2011, 15:17 UTC
- Message-ID
- <CAGdFq_hWVPCEeJKKccp4Wc-j+XMSFXqRf6VYd7ngLER8RhODRQ@mail.gmail.com>
- In-Reply-To
- <7vipp1otyp.fsf@alter.siamese.dyndns.org>
Heya,
On Sat, Sep 10, 2011 at 07:19, Junio C Hamano <gitster@pobox.com> wrote:
Show 8 quoted lines
> Even under v2 design, if somebody who has access to both k.org (public) > and github (proprietary in the hypothetical universe) would want to > combine the signed-push notes to see a unified picture (perhaps I push to > these two sites with different frequencies), he can fetch signed-push > notes from both sites and merge them himself. But v3 design also allows > anybody who has access to k.org (which is public so by definition that > truly is anybody) to peek into signed-push notes at k.org to learn more > than he should be able to.
I think this is also some further motivation to have a refs/remotes/github/notes/signed-push and a refs/remotes/korg/notes/signed-push, rather than have everything automatically go into refs/notes/signed-push when fetching from a remote.
(If I misremembered and it's already that way, please ignore this message :P)
-- Cheers, Sverre Rabbelier