From: Junio C Hamano <gitster@pobox.com>
Date: Tue, 14 Jun 2016 23:47:35 GMT
Subject: Re: [PATCHv3] gpg-interface: check gpg signature creation status
Message-ID: <xmqqporj72p4.fsf@gitster.mtv.corp.google.com>
In-Reply-To: <20160614222633.GA32020@sigill.intra.peff.net>

Jeff King <peff@peff.net> writes:

> I'm still undecided on whether it is a better approach than making
> sure the stdout we got looks sane. In particular I'd worry that it
> would make things harder for somebody trying to plug in something
> gpg-like (e.g., if you wanted to do something exotic like call a
> program which fetched the signature from a remote device or
> something).  But it's probably not _that_ hard for such a script
> to emulate --status-fd.

I share the same thinking, but at the same time, it already is a
requirement to give --status-fd output that is close enough on the
signature verification side, isn't it?