From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Q2saM-0006AV-8p for garchives@archives.gentoo.org; Thu, 24 Mar 2011 22:00:54 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 40B7E1C0CE; Thu, 24 Mar 2011 22:00:40 +0000 (UTC) Received: from mail-iw0-f181.google.com (mail-iw0-f181.google.com [209.85.214.181]) by pigeon.gentoo.org (Postfix) with ESMTP id 03F6F1C0B1 for ; Thu, 24 Mar 2011 22:00:05 +0000 (UTC) Received: by iwn2 with SMTP id 2so474339iwn.40 for ; Thu, 24 Mar 2011 15:00:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:from:date :x-google-sender-auth:message-id:subject:to:content-type; bh=f87Jx+28tf8VvFO8HoKINTB0f39OqeE8tQZTJKZbsUU=; b=lBR6T7pZOtSLqK2HHVqdmeB06WVv5LTqqjUfmdkd3LGmGJd9eHn/vIXazgDnmcYvnW MzV7zyGRifphjCVoPYL1d6IYQMSOksGf+eF+khauStaj6b7TexPBSUnMmles/8VcDh0q Qw6HKxgDe8lMGM/NAlRWnTbT654DER8DuXkuc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:from:date:x-google-sender-auth:message-id :subject:to:content-type; b=WS7QcsLzQDWLeVy3zc+zIjVAdo+7RRWJyYpGu6lMW8OveWqggPwj7AXMJSMcSVmoWj J2C8EMbffde4aRwseb99MZEmx+TCVXK+POmRzAXba4BN507xB7ATsRZqvyQejmQz1yG2 cf6g7sdTqey1pQ+ZRlDfSzYozra+mMJ+j+5fI= Received: by 10.231.67.213 with SMTP id s21mr25594ibi.22.1301004005198; Thu, 24 Mar 2011 15:00:05 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Sender: vapierfilter@gmail.com Received: by 10.231.11.195 with HTTP; Thu, 24 Mar 2011 14:59:45 -0700 (PDT) From: Mike Frysinger Date: Thu, 24 Mar 2011 17:59:45 -0400 X-Google-Sender-Auth: U1aCnOWEmS4c3AjKJbfZVo79NOw Message-ID: Subject: [gentoo-dev] rejecting unsigned commits To: gentoo-dev@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 X-Archives-Salt: X-Archives-Hash: 7210bc8a18140db8f18ff89245efacd5 is there any reason we should allow people to commit unsigned Manifest's anymore ? generating/posting/enabling a gpg key is ridiculously easy and there's really no excuse for a dev to not have done this already. when i look at the tree, the signed stats are stupid low: $ find *-* -maxdepth 2 -name Manifest | wc -l 14438 $ find *-* -maxdepth 2 -name Manifest -exec grep -l 'BEGIN PGP SIGNATURE' {} + | wc -l 6032 this is especially important for the people doing arch keywording since they make a ton of commits. i'm looking at you armin76. -mike