From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1SbmIj-0000Wm-MU for garchives@archives.gentoo.org; Tue, 05 Jun 2012 05:27:29 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AAB48E0AB7; Tue, 5 Jun 2012 05:27:09 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 60786E0A60 for ; Tue, 5 Jun 2012 05:26:23 +0000 (UTC) Received: from mail-wg0-f53.google.com (mail-wg0-f53.google.com [74.125.82.53]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: djc) by smtp.gentoo.org (Postfix) with ESMTPSA id 9BA461B4016 for ; Tue, 5 Jun 2012 05:26:22 +0000 (UTC) Received: by wgbfm10 with SMTP id fm10so4333876wgb.10 for ; Mon, 04 Jun 2012 22:26:19 -0700 (PDT) Received: by 10.216.138.130 with SMTP id a2mr11213026wej.35.1338873979856; Mon, 04 Jun 2012 22:26:19 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Received: by 10.216.168.82 with HTTP; Mon, 4 Jun 2012 22:25:59 -0700 (PDT) In-Reply-To: <20120604204132.GB3692@localhost> References: <20120604191000.GA3692@localhost> <20120604204132.GB3692@localhost> From: Dirkjan Ochtman Date: Tue, 5 Jun 2012 07:25:59 +0200 Message-ID: Subject: Re: [gentoo-dev] Git braindump: 1 of N: merging & git signing To: gentoo-dev@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: 52452725-5008-4481-beca-6819fa051c6e X-Archives-Hash: 64dc83afae8d7ad0cad897c99b095590 On Mon, Jun 4, 2012 at 10:41 PM, Brian Harring wrote: > The dev, prior to signing that, should be verifying what they're > adding (moreso, what exists between last signed rev and theirs), they > agree to and know of. =C2=A0Specifically, they're asserting their additio= n. What Rich is arguing (and which I think makes some sense) is that people will probably not be inclined to verify the signature of the tree they just pulled from gentoo-x86. We can't really force them too, since it happens on their own machine. Still, I think we should drop this discussion for now. Cheers, Dirkjan