From: Junio C Hamano <gitster@pobox.com>
Date: Tue, 26 Jan 2016 21:13:16 GMT
Subject: Re: [RFC] tag-ref and tag object binding
Message-ID: <xmqqwpqwavtf.fsf@gitster.mtv.corp.google.com>
In-Reply-To: <20160126202651.GA1090@sigill.intra.peff.net>

Jeff King <peff@peff.net> writes:

> On Tue, Jan 26, 2016 at 10:29:42AM -0500, Santiago Torres wrote:
>
>> > If you cannot trust those with write access to a repo that you are
>> > pulling and installing from you might want to re-check where you are
>> > pulling or installing from ;)
>> 
>> Yeah, I see your point, but mechanisms to ensure the server's origin can
>> be bypassed (e.g., a MITM). I don't think it would hurt to ensure the
>> source pointed to is the source itself. The tag signature can help us do
>> this.
>
> Right. I think the more interesting use case here is "I trust the
> upstream repository owner, but I do not trust their hosting site of
> choice."

Yup, and push-certificate is there to help with that issue.