From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-dev+bounces-44929-garchives=archives.gentoo.org@lists.gentoo.org>) id 1Q2t1r-0000Z1-Kj for garchives@archives.gentoo.org; Thu, 24 Mar 2011 22:29:19 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 28E101C0F2; Thu, 24 Mar 2011 22:29:11 +0000 (UTC) Received: from mail-pw0-f53.google.com (mail-pw0-f53.google.com [209.85.160.53]) by pigeon.gentoo.org (Postfix) with ESMTP id 2EC9F1C02F for <gentoo-dev@lists.gentoo.org>; Thu, 24 Mar 2011 22:28:44 +0000 (UTC) Received: by pwj7 with SMTP id 7so108550pwj.40 for <gentoo-dev@lists.gentoo.org>; Thu, 24 Mar 2011 15:28:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type:content-transfer-encoding; bh=X6SPlcQTQogtUmldjTgorXKmce82xH84GjYFwhjZVmY=; b=Dpq5IcwlqG6d4R5w62aC/GLlj9pK+9iMITjkbdWbaxtXDcIJ4zWd4Uue9tAUb6jOOc dbm/8xarmWeyIgckj4pc+Ur07K59MFl6VFDUv4ZDAbT2eO3UAACMMa3YVGeGh1mYqRVg wnhmZWBOLO0y1n+1L2vqktztRe8KGWFV0zlic= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=JL1U+1GxNXCXYKl51CCc+I6rchLz15jWqsOjrW6Dk3F25ZOmrQo+A9a9Rbjq8hb4/g sBKMJ1aw9dEhv5uBAOwRbKbOS6hn8xPUV7rj85RYVDI2lmTbnwE3mnelQc75Z+5/GDuz z8/EXRr/Vvs6wpGe15aKdoro5ExutKvkMmEz8= Precedence: bulk List-Post: <mailto:gentoo-dev@lists.gentoo.org> List-Help: <mailto:gentoo-dev+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org> X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Received: by 10.143.27.13 with SMTP id e13mr27231wfj.336.1301005724405; Thu, 24 Mar 2011 15:28:44 -0700 (PDT) Received: by 10.142.221.19 with HTTP; Thu, 24 Mar 2011 15:28:44 -0700 (PDT) In-Reply-To: <AANLkTi=4o69ytUxAVpy-O31AWQv-5p4bEWD2466NWYGx@mail.gmail.com> References: <AANLkTi=4o69ytUxAVpy-O31AWQv-5p4bEWD2466NWYGx@mail.gmail.com> Date: Thu, 24 Mar 2011 18:28:44 -0400 Message-ID: <AANLkTimJAuw1n8U3KyxFSVEwKfpkkWmrvgYgFM-bpB=h@mail.gmail.com> Subject: Re: [gentoo-dev] rejecting unsigned commits From: Mike Gilbert <floppymaster@gmail.com> To: gentoo-dev@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: c7534c28aee02199d3f397d39a351e1f On Thu, Mar 24, 2011 at 5:59 PM, Mike Frysinger <vapier@gentoo.org> wrote: > is there any reason we should allow people to commit unsigned > Manifest's anymore ? =C2=A0generating/posting/enabling a gpg key is > ridiculously easy and there's really no excuse for a dev to not have > done this already. > Is there some plan to make verification of signed Manifests easy/automatic for end users? Or am I misunderstanding the point of Manifest signing?