Messages in this thread | | | From | Linus Torvalds <> | Date | Mon, 13 Feb 2012 14:29:00 -0800 | Subject | Re: [GIT PULL] battery-urgent.git |
| |
On Mon, Feb 13, 2012 at 12:15 PM, Anton Vorontsov <cbouatmailru@gmail.com> wrote: > > Let's try requesting pull via the signed tag thing...
Well, it works, but your key currently isn't signed by *anybody*, so right now it is a bit pointless.
That said, if you get it signed by more people in the future, the signature that stays around in the kernel will become more meaningful than it is today.
Qnd even in the absence of that, any future pushes using the same key will obviously show that the git tree is controlled by somebody who has access to that same key. So a gpg signature has *some* meaning even when there is no external sign of trust, but it really is not nearly as meaningful as it could be.
I don't know where you are physically, but we've got a fairly geographically wide set of keys these days, so I think it should be possible to get that key signed by some relevant people.. Hmm?
Linus
| |