[lkml]   [2011]   [Nov]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [git patches] libata updates, GPG signed (but see admin notes)

On Wed, Nov 02, 2011 at 10:11:26AM +0100, Ingo Molnar wrote:
> If this approach is used then it would be nice to have a .gitconfig
> switch to require trusted pulls by default: to not allow doing
> non-signed or untrusted pulls accidentally, or for Git to warn in a
> visible, hard to miss way if there's a non-signed pull.
> This adds social uncertainty (and an element of a silent alarm) to a
> realistic attack: the attacker wouldnt know exactly how the puller
> checks signed pull requests, it's kept private.

But that way you get a false sense of alarm when someone sent a
perfectly trustable pull request, e.g. by signed email.

Another question: If store the actual pgp/gpg signatures in the git tree,
how do you handle signatures by keys which were valid by the time the
signature was made but expired when checking some time afterwards? AFAICT,
gpg will only tell you the key is expired _now_, and will make no statement
regarding the time the actual signature was made.


 \ /
  Last update: 2011-11-02 12:35    [W:0.083 / U:27.828 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site