From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Wingo Subject: Re: =?utf-8?Q?=E2=80=98core-updates=E2=80=99?= merge is a squashed commit Date: Fri, 05 Aug 2016 18:50:30 +0200 Message-ID: <87invfjh2h.fsf@igalia.com> References: <87wpjxy4ta.fsf_-_@gnu.org> <20160803211032.GA6034@jasmine> <87a8gtyntw.fsf@netris.org> <20160804082400.GA1638@solar> <87ziosyalv.fsf@netris.org> <87a8gso9p4.fsf@igalia.com> <20160804164453.GB8137@jasmine> <87a8gsmq2h.fsf@igalia.com> <20160804200519.GA14007@jasmine> <874m6zmzvk.fsf@igalia.com> <20160805145943.GA16973@jasmine> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:48300) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bViKY-0004QW-HZ for guix-devel@gnu.org; Fri, 05 Aug 2016 12:50:43 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bViKS-00017t-7x for guix-devel@gnu.org; Fri, 05 Aug 2016 12:50:41 -0400 Received: from pb-sasl2.pobox.com ([64.147.108.67]:61073 helo=sasl.smtp.pobox.com) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bViKS-00017U-0Y for guix-devel@gnu.org; Fri, 05 Aug 2016 12:50:36 -0400 In-Reply-To: <20160805145943.GA16973@jasmine> (Leo Famulari's message of "Fri, 5 Aug 2016 10:59:43 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org On Fri 05 Aug 2016 16:59, Leo Famulari writes: > On Fri, Aug 05, 2016 at 09:35:59AM +0200, Andy Wingo wrote: >> Yeah. I guess I don't see see "author misattribution on unsigned >> commits" as part of the threat model. >> >> My mental model is that if you have a signed commit A with unsigned >> parents B, C, ..., that it's the person who signed commit A who signs >> off on commits B, C, and so on. That person attests to the integrity of >> that range of commits, *including* the author field(s). > > But, how does anyone know that the person who signed A attests to B and > C? I don't think Git has a feature that conveys that intention. Why would you sign a commit if you don't attest to intermediate unsigned commits? A