Date: Tue, 16 Nov 2004 21:43:46 +0100
From: Jan Hudec <bulb@ucw.cz>
To: Karel Gardas <kgardas@objectsecurity.com>
Subject: Re: [Gnu-arch-users] Re: darcs vs tla
Message-ID: <20041116204346.GA4854@vagabond>
References: <20041116194422.GA9828@vagabond>
	<Pine.LNX.4.43.0411162100440.13313-100000@gardas.dyndns.org>
Mime-Version: 1.0
In-Reply-To: <Pine.LNX.4.43.0411162100440.13313-100000@gardas.dyndns.org>
User-Agent: Mutt/1.5.6+20040907i
Cc: gnu-arch-users@gnu.org, lode.leroy@advalvas.be,
        jeremy.shaw@linspireinc.com, Dustin Sallings <dustin@spy.net>
Precedence: list
Content-Type: multipart/mixed; boundary="===============0825471877=="
Sender: gnu-arch-users-bounces+migo=homemail.com@gnu.org
Errors-To: gnu-arch-users-bounces+migo=homemail.com@gnu.org
Status: RO
Content-Length: 2112
Lines: 67

--===============0825471877==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="Nq2Wo0NMKNjxTN9z"
Content-Disposition: inline


--Nq2Wo0NMKNjxTN9z
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Nov 16, 2004 at 21:03:26 +0100, Karel Gardas wrote:
> On Tue, 16 Nov 2004, Jan Hudec wrote:
>=20
> > > - darcs does not support patch signing/verification except simple
> > >   email-based transport method (showstopper for me)
> >
> > Arch does not support signing/verification for transport -- it supports
> > it for STORAGE. That's the key point. The signatures are stored and can
> > be validated at any point in future. Eg. after a security accident.
>=20
> Yes, true, sorry for not so precise definition. The most important thing
> is that signing/verification is transport independend while this is not
> the case in darcs. In addition darcs patches are not signed in repository
> but on export (by send command), which is showstopper about which I wrote.

Yes. That is completely useless for checking integrity of your
repository after the computer was compromised or when your harddisk is
dying.

---------------------------------------------------------------------------=
----
						 Jan 'Bulb' Hudec <bulb@ucw.cz>

--Nq2Wo0NMKNjxTN9z
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBmmaCRel1vVwhjGURAlhFAJ9Uxawy+ooBZ5udSZieGwrF9MfgUQCfVcfQ
9YIrLrvIG2kqrgQS95/5+98=
=4R18
-----END PGP SIGNATURE-----

--Nq2Wo0NMKNjxTN9z--


--===============0825471877==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnu-arch-users mailing list
Gnu-arch-users@gnu.org
http://lists.gnu.org/mailman/listinfo/gnu-arch-users

GNU arch home page:
http://savannah.gnu.org/projects/gnu-arch/
--===============0825471877==--