[ANN] autosign extension
Hans Meine
meine at informatik.uni-hamburg.de
Wed May 13 09:52:12 CDT 2009
On Wednesday 13 May 2009 16:39:53 Arne Babenhauserheide wrote:
> On Wednesday, 13. May 2009 16:02:57 Lasse Kliemann wrote:
> > However, I would prefer something quite different. We could allow
> > a configurable set of pairs (F,U) consisting of a key fingerprint
> > F and a username U each. The configuration could be done in
> > ~/.hgrc or such.
>
> It could also be specified in a version tracked file .hgkeys or so (use the
> keys in the _previous_ revision - that gives a verified line of commits).
>
> That way keys can be specified on a per-repo base and trusted keys can
> easily be added.
That was also my first thought, but wouldn't that make the implementation of
checksigs difficult? I.e. every sig would have to be checked with the
corresponding .hgkeys from the previous revision.
Have a nice day,
Hans
More information about the Mercurial
mailing list