From: Junio C Hamano <gitster@pobox.com>
Date: Thu, 07 Jan 2016 18:00:07 GMT
Subject: Re: Some issues when trying to set up a shallow git mirror server
Message-ID: <xmqq4mep5kyg.fsf@gitster.mtv.corp.google.com>
In-Reply-To: <20160107165417.GB3397@logi.codethink.co.uk>

Richard Maw <richard.maw@codethink.co.uk> writes:

> This is inconvenient for us,
> as we were explicitly using refspecs which didn't force the fetch,
> since we were using the "non fast-forward update" errors
> to detect whether upstream force pushed important refs
> which could be a sign of tampering.
>
> While the client doesn't have enough information
> the server has those commits.
> Would it make sense for the server to be able to tell the client
> "trust me, that commit is a descendant of the previous one"?

It does not in our security model, as you do not blindly trust the
other side, whether you are a "client" or a "server".