From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-168458-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 90BC81384B4
	for <garchives@archives.gentoo.org>; Mon, 16 Nov 2015 22:33:07 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 3006F21C011;
	Mon, 16 Nov 2015 22:32:58 +0000 (UTC)
Received: from mail-io0-f182.google.com (mail-io0-f182.google.com [209.85.223.182])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 1B4C3E07EB
	for <gentoo-user@lists.gentoo.org>; Mon, 16 Nov 2015 22:32:57 +0000 (UTC)
Received: by iofh3 with SMTP id h3so399233iof.3
        for <gentoo-user@lists.gentoo.org>; Mon, 16 Nov 2015 14:32:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:date:message-id:subject
         :from:to:content-type;
        bh=BbUPwRPD2vtc5LF3/gc3lO1bzQRwDk1degBW93P5ONo=;
        b=g/8lkpgVPHyv0b9WAtTVUuZsui6L2VxC0Ar6cRKs8pC+Fm2ZCt3IQGYzPtyyw/yV/o
         JMgofKmr+i75+javc0By46p3AMUWx5wW+0S0PgVJ2XmOyJmH6Ma6l0JfUMPkm3EhtcHV
         le9IuSOvVdGtJ3PZmxkit41YbwSJIwCpq1udC8geMiM5PtR2dIxcNwbW43vL7I8iSPYJ
         kodcxN0SkpsgG2v9rzzJqJDCbQ594t5RqK4UvuMuOcWFSDyOueFZNbEMup96J5RmCBeH
         iNO7nEqfFqeDSIewc9rGF51OTYpm6EzYIWX7jxYqo9D9Rot9T+OOr9F1C3GgDPQblq7z
         58LQ==
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
X-Received: by 10.107.8.133 with SMTP id h5mr36298618ioi.93.1447713176424;
 Mon, 16 Nov 2015 14:32:56 -0800 (PST)
Sender: freemanrich@gmail.com
Received: by 10.79.118.215 with HTTP; Mon, 16 Nov 2015 14:32:56 -0800 (PST)
In-Reply-To: <2115081.hdzugRMeM0@thetick>
References: <n22dge$mnp$1@ger.gmane.org>
	<28052.1447659180@ccs.covici.com>
	<n2d3a3$sbg$1@ger.gmane.org>
	<2115081.hdzugRMeM0@thetick>
Date: Mon, 16 Nov 2015 17:32:56 -0500
X-Google-Sender-Auth: BGdARiCYIcvrHJaccJGUsELMs3Q
Message-ID: <CAGfcS_nh_qvomf6H-WCff2OioX0q-Spemvhqjzg2pWj0LuOSfQ@mail.gmail.com>
Subject: Re: [gentoo-user] Re: All sorts of digest verification failures
From: Rich Freeman <rich0@gentoo.org>
To: gentoo-user@lists.gentoo.org
Content-Type: text/plain; charset=UTF-8
X-Archives-Salt: 055e338e-9d67-476b-8ecb-5a678a6c16fa
X-Archives-Hash: bfbc2a93d549bcd7ad95bc5a8ee5f276

On Mon, Nov 16, 2015 at 4:49 PM, Marc Joliet <marcec@gmx.de> wrote:
>
> Don't forget that in Gentoo all commits are also GPG signed.
>

Sure, but to be fair those signatures are only bound to the content of
the commit by an sha1 hash.

-- 
Rich