From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Kangas Newsgroups: gmane.emacs.bugs Subject: bug#24461: Signing Emacs git release tags Date: Sun, 29 Sep 2019 18:22:06 +0200 Message-ID: References: <87y2y7krzf.fsf@trouble.defaultvalue.org> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="125390"; mail-complaints-to="usenet@blaine.gmane.org" Cc: John Wiegley , Nicolas Petton , 24461@debbugs.gnu.org To: Rob Browning Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Sep 29 18:23:53 2019 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1iEbzE-000WTg-R9 for geb-bug-gnu-emacs@m.gmane.org; Sun, 29 Sep 2019 18:23:52 +0200 Original-Received: from localhost ([::1]:40840 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iEbzC-00066S-Mk for geb-bug-gnu-emacs@m.gmane.org; Sun, 29 Sep 2019 12:23:50 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53519) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iEbyU-000635-Al for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:23:08 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iEbyR-0005ke-CP for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:23:04 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:46881) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iEbyR-0005gk-9J for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:23:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iEbyQ-0007Ju-4v for bug-gnu-emacs@gnu.org; Sun, 29 Sep 2019 12:23:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Kangas Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 29 Sep 2019 16:23:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24461 X-GNU-PR-Package: emacs Original-Received: via spool by 24461-submit@debbugs.gnu.org id=B24461.156977414528091 (code B ref 24461); Sun, 29 Sep 2019 16:23:02 +0000 Original-Received: (at 24461) by debbugs.gnu.org; 29 Sep 2019 16:22:25 +0000 Original-Received: from localhost ([127.0.0.1]:55702 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iEbxp-0007J1-Bd for submit@debbugs.gnu.org; Sun, 29 Sep 2019 12:22:25 -0400 Original-Received: from mail-pl1-f180.google.com ([209.85.214.180]:39008) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iEbxo-0007Ie-6n for 24461@debbugs.gnu.org; Sun, 29 Sep 2019 12:22:24 -0400 Original-Received: by mail-pl1-f180.google.com with SMTP id s17so2893389plp.6 for <24461@debbugs.gnu.org>; Sun, 29 Sep 2019 09:22:24 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=soMED38f9iQNI3gIKUhALe9XL1HWE/7wvV4Pal1bEAc=; b=gs4vvHUTXzjS+PjPUWZnZkIHl+iP0VC3vaoEMFQ+uVAHDU8cFNd5lOkbN7tcM8xQUg xO1edW1LM1VqfRwaTJD/KdOtmg94khRmNshIW3qsOWnFwtH8hlUVWYSTSe53Pd0mIm3U BKFmD06a+YRsFxKmm7qOana4Jx5y5BXmxorkVq647mq1y92emvySTWNRS3jvWJPhA4Pc swD1coqTdHE352y3ZB4f1QmjzsosKh3AldW9XY8PRE4/vhBR3z2HtYHmKDHq1f0ODzxj d6o+PDbesJraL8cnzw+uSWTJvZVjSGKQjNFSljMzjFvV6Ytr1vXDYYdv3v1vQlAKUXbD 9DAw== X-Gm-Message-State: APjAAAV3ba7/IqXvP2XcYFs7BGxifLxCYvaT8WFWNDjBkuVnXTLFVdaF Qjj3xQkaLtscFcygbu2Eqkl+GToz38Jt8lihF1I= X-Google-Smtp-Source: APXvYqwSFcqhMauwRGOdHb9nOtoh3D11D5pdq6ftE1Vowk/0gq6ZfyUUPM1L1uicE/HK7goIQgpcPLqJSbse/qBtOVs= X-Received: by 2002:a17:902:a515:: with SMTP id s21mr16358747plq.259.1569774137365; Sun, 29 Sep 2019 09:22:17 -0700 (PDT) In-Reply-To: <87y2y7krzf.fsf@trouble.defaultvalue.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.51.188.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:167723 Archived-At: Rob Browning writes: > In any case, after originally filing this, I noticed that you had signed > commits, and I just rely on those now. So while it might still be nice > to have signed tags (too), it's not all that important to me anymore. I think signing tags is different than signing commits. A signed tag means you can have more trust that you are using the code with the latest fix to security problem X, announced to have been released in tagged Emacs version Y, and not code missing that fix. Best regards, Stefan Kangas