From: Sverre Rabbelier Date: Sat, 10 Sep 2011 15:17:14 GMT Subject: Re: [PATCH v3 0/4] Signed push Message-ID: In-Reply-To: <7vipp1otyp.fsf@alter.siamese.dyndns.org> Heya, On Sat, Sep 10, 2011 at 07:19, Junio C Hamano wrote: > Even under v2 design, if somebody who has access to both k.org (public) > and github (proprietary in the hypothetical universe) would want to > combine the signed-push notes to see a unified picture (perhaps I push to > these two sites with different frequencies), he can fetch signed-push > notes from both sites and merge them himself. But v3 design also allows > anybody who has access to k.org (which is public so by definition that > truly is anybody) to peek into signed-push notes at k.org to learn more > than he should be able to. I think this is also some further motivation to have a refs/remotes/github/notes/signed-push and a refs/remotes/korg/notes/signed-push, rather than have everything automatically go into refs/notes/signed-push when fetching from a remote. (If I misremembered and it's already that way, please ignore this message :P) -- Cheers, Sverre Rabbelier