From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: push right for trivial commits Date: Thu, 22 Nov 2018 13:08:30 -0500 Message-ID: <20181122180830.GA30673@jasmine.lan> References: <875zxej04d.fsf@gmail.com> <87k1lq5tv0.fsf@gnu.org> <87d0rd2tj6.fsf@gmail.com> <87sh07r285.fsf@gnu.org> <87sh05zr5q.fsf@gmail.com> <20181113123153.xvdmwo7e46m5ap5t@abyayala> <878t1wj6a0.fsf@gnu.org> <87ftvu6vp6.fsf@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="9jxsPFA5p3P2qPhR" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:47127) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gPtP8-0006Yw-35 for guix-devel@gnu.org; Thu, 22 Nov 2018 13:08:42 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gPtP3-0006F3-Eg for guix-devel@gnu.org; Thu, 22 Nov 2018 13:08:42 -0500 Content-Disposition: inline In-Reply-To: <87ftvu6vp6.fsf@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Alex Vong Cc: guix-devel@gnu.org --9jxsPFA5p3P2qPhR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Nov 22, 2018 at 04:07:33AM +0800, Alex Vong wrote: > I think ECC key works with commit signing precisely because commit > signing simply requires Savannah to store the key. However, for > functionalities provided by Savannah (e.g. sending email to your address > encrypted with your ECC public key), it wouldn't work (as mentioned in > ). To clarify, Savannah doesn't require you to store any key at all in order to sign Git commits. I think that Savannah accounts don't integrate with Git at all; they simply offer hosted Git repositories, and commit signing is a feature of Git. We require Guix contributors to upload their keys to their Savannah account so that there is an authoritative source of signing keys. --9jxsPFA5p3P2qPhR Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlv28JsACgkQJkb6MLrK fwhHcRAAnQsisYBbEzAtxdMH3qwEM45fmF7z8To4VZv5yZJzqJNI/ojw46BSf6Z3 IdPP52y9iUzPd/nOidwoJzyHDcPYWAZmqThcGmTl3aUHdw9LKAQeebIwAvvd2O6q RnKtrVWF+gf/6KHTEb0NLC6vuCodxi+llNtftZyjLObBtSWMdeCMC33SBy9M7Olw ZNT7wRHHzrDvtDG15L5rUhNhgcFxaVrWN3NLYmSCJRdfnapOoIZ59IUTjrZkvorq z4IPGasGD+f1wj5d4gZQYhLIz/wLHxdsTpr7CXdAdA1t5jB6f7WLSFDhCO8679jF o/C1Z4YDLF92T29VNCTJ2nHvdaAvjI2H2W4IdacLQrWJgTbhiluDO5XaesKRTjpL MpJ3NmpsKFXde109eRWnMxff+FHrnhPP7faGzn59UKhODzeoHuLl4YhMryGvzO+1 8KyoEemzrSHbQuVSHvVY2wziWQh6K++9KAa8C0nusvsImn1qIyRwxh3ndipchFd5 aQHF65AgyNiXNQyw6Ec6qd4aJ1FM+e7J6mgFAGIuB/ITkzAB8u02p6xQg7PcYnmj LSbOG95FVJ6vwjV16PwsnalNPS3Byt7unNNq0+FqRPBhN3aC4QJ2z8O83PExy3BG PVJOkdL2tEo5FP5kc4jVSkeYJG80RNzyzHz6JMcFJ4prEQXP2PI= =L+pr -----END PGP SIGNATURE----- --9jxsPFA5p3P2qPhR--