# Re: Commit signing 3 messages from 2007-01-15 to 2007-01-15. Participants: Nicolas Pitre, Horst H. von Brand, Johannes Schindelin. Thread: https://gitlist.dev/t/6384 ## Horst H. von Brand, 2007-01-15 13:01 Subject: Re: Commit signing Message-ID: <200701151301.l0FD1vPg007623@laptop13.inf.utfsm.cl> URL: https://gitlist.dev/e/200701151301.l0FD1vPg007623%40laptop13.inf.utfsm.cl In-Reply-To: ``` Andy Parkins wrote: [...] > Again true. What has that to do with Git though? Why shouldn't Git have > features that let people with different methods of development from you use > it? As long as nobody else ends up paying the cost... > It is certainly true that signed commits /is/ a feature. And it's a > feature that some people might want. If there isn't a technical argument > against it, what does it matter? It needs to be accomodated in the commit object format, so it means an(other) incompatible change there. Need to add checking for properly signed commits all the way when slurping in a stream of changes. Need to set the whole up so it can bail out as if nothing ever happened in case one commit doesn't check out (this is probably easy). > (Note: it doesn't matter enough to me that I would put the time in, I'm > arguing in the abstract really - should features be kept out because they > allow a development method we would find distasteful?) I'd vote for "If somebody needs this bad enough, they are free to fork pgit ('paranoid git')", and add "if the changes look sane, and don't screw up the base (too much), we'll talk about merging back". Open source development, scratch your own itch, bazaar and all that. -- Dr. Horst H. von Brand User #22616 counter.li.org Departamento de Informatica Fono: +56 32 2654431 Universidad Tecnica Federico Santa Maria +56 32 2654239 Casilla 110-V, Valparaiso, Chile Fax: +56 32 2797513 ``` ## Johannes Schindelin, 2007-01-15 13:45 Subject: Re: Commit signing Message-ID: URL: https://gitlist.dev/e/Pine.LNX.4.63.0701151443440.22628%40wbgn013.biozentrum.uni-wuerzburg.de In-Reply-To: <200701151301.l0FD1vPg007623@laptop13.inf.utfsm.cl> ``` Hi, On Mon, 15 Jan 2007, Horst H. von Brand wrote: > Andy Parkins wrote: > > > It is certainly true that signed commits /is/ a feature. And it's a > > feature that some people might want. If there isn't a technical argument > > against it, what does it matter? > > It needs to be accomodated in the commit object format, so it means > an(other) incompatible change there. No. A signature can be appended to any text (which a raw commit buffer is), and git allows for appending that signature before writing the object (which also gives it the final object name). So, no commit object format change necessary. Ciao, Dscho ``` ## Nicolas Pitre, 2007-01-15 16:47 Subject: Re: Commit signing Message-ID: URL: https://gitlist.dev/e/Pine.LNX.4.64.0701151143470.2577%40xanadu.home In-Reply-To: <200701151301.l0FD1vPg007623@laptop13.inf.utfsm.cl> ``` On Mon, 15 Jan 2007, Horst H. von Brand wrote: > Andy Parkins wrote: > > > Again true. What has that to do with Git though? Why shouldn't Git have > > features that let people with different methods of development from you use > > it? > > As long as nobody else ends up paying the cost... > > > It is certainly true that signed commits /is/ a feature. And it's a > > feature that some people might want. If there isn't a technical argument > > against it, what does it matter? > > It needs to be accomodated in the commit object format, so it means > an(other) incompatible change there. Not really. Nothing prevents from having a signature block at the bottom of the commit message, just like signed tags. > Need to add checking for properly > signed commits all the way when slurping in a stream of changes. Need to > set the whole up so it can bail out as if nothing ever happened in case one > commit doesn't check out (this is probably easy). ... and if you don't care about the signature you may ignore it entirely. Nicolas ```