From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Rob Browning Newsgroups: gmane.emacs.bugs Subject: bug#24461: Signing Emacs git release tags Date: Sun, 29 Sep 2019 11:05:40 -0500 Message-ID: <87y2y7krzf.fsf@trouble.defaultvalue.org> References: Mime-Version: 1.0 Content-Type: text/plain Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="54694"; mail-complaints-to="usenet@blaine.gmane.org" Cc: John Wiegley , 24461@debbugs.gnu.org To: Stefan Kangas , Nicolas Petton Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Sep 29 18:06:15 2019 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1iEbiA-000E89-T7 for geb-bug-gnu-emacs@m.gmane.org; Sun, 29 Sep 2019 18:06:15 +0200 Original-Received: from localhost ([::1]:40678 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iEbi9-0007KR-KW for geb-bug-gnu-emacs@m.gmane.org; Sun, 29 Sep 2019 12:06:13 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:51191) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iEbhz-0007HG-Lg for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:06:04 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iEbhy-0005s7-Ka for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:06:03 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:46810) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iEbhy-0005rz-HW for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:06:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iEbhy-0004l7-9e for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:06:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Rob Browning Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 29 Sep 2019 16:06:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24461 X-GNU-PR-Package: emacs Original-Received: via spool by 24461-submit@debbugs.gnu.org id=B24461.156977314118266 (code B ref 24461); Sun, 29 Sep 2019 16:06:02 +0000 Original-Received: (at 24461) by debbugs.gnu.org; 29 Sep 2019 16:05:41 +0000 Original-Received: from localhost ([127.0.0.1]:55631 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iEbhd-0004kX-Er for submit@debbugs.gnu.org; Sun, 29 Sep 2019 12:05:41 -0400 Original-Received: from defaultvalue.org ([45.33.119.55]:46762 ident=postfix) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iEbhb-0004kP-K1 for 24461@debbugs.gnu.org; Sun, 29 Sep 2019 12:05:40 -0400 Original-Received: from trouble.defaultvalue.org (localhost [127.0.0.1]) (Authenticated sender: rlb@defaultvalue.org) by defaultvalue.org (Postfix) with ESMTPSA id A734C2018E; Sun, 29 Sep 2019 11:05:38 -0500 (CDT) Original-Received: by trouble.defaultvalue.org (Postfix, from userid 1000) id E590014E068; Sun, 29 Sep 2019 11:05:40 -0500 (CDT) In-Reply-To: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.51.188.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:167711 Archived-At: Stefan Kangas writes: > Nicolas Petton writes: >> True, I think it's too late. My commits (including the one used for the >> release) should all be signed though. > > How about signing the release tags from 27.1 and onwards? Hmm, hadn't thought about this -- I don't know what git would do if you changed an unsigned tag to a signed tag without changing the hash. At a minimum, I'd guess that people that already have the tag wouldn't fetch the new one, but I don't know what else, if anything, git might do about it (warn, fail, nothing, ...). And of course, you wouldn't want to rely on whatever current git does about it, unless that were upstream's intended/documented behavior. (I suppose if it were deemed important enough, emacs-X.Y-sig tags or something could be added for older releases, though the meaning of those tags might be somewhat different.) In any case, after originally filing this, I noticed that you had signed commits, and I just rely on those now. So while it might still be nice to have signed tags (too), it's not all that important to me anymore. Thanks -- Rob Browning rlb @defaultvalue.org and @debian.org GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4