Re: ct-ng -> git repos instead of single patches

[Arnaud Lacombe <lacombar at gmail dot com>]

Hi,

On Tue, Aug 3, 2010 at 1:13 PM, Enrico Weigelt <weigelt@metux.de> wrote:
> * Arnaud Lacombe <lacombar@gmail.com> wrote:
>
>> this does not say anything about trust, the source of patches, nor
>> their quality. Has it been made by the project developers ? if so, why
>> has it not been integrated ? Has it been made by someone who had the
>> slightest knowledge of how the patched software work ? or by a student
>> in internship working overtime for an integrator ?
>
> The same applies to having single text-based patches.
> But git gives the ability to cryptographically sign tags easily,
> signature checks could be done fully automatic.
>
if the patch's origin cannot be trusted, signing it won't change anything...

 - Arnaud

--
For unsubscribe information see http://sourceware.org/lists.html#faq