[ANN] autosign extension

Hans Meine meine at informatik.uni-hamburg.de
Wed May 13 09:52:12 CDT 2009


On Wednesday 13 May 2009 16:39:53 Arne Babenhauserheide wrote:
> On Wednesday, 13. May 2009 16:02:57 Lasse Kliemann wrote:
> > However, I would prefer something quite different. We could allow
> > a configurable set of pairs (F,U) consisting of a key fingerprint
> > F and a username U each. The configuration could be done in
> > ~/.hgrc or such.
>
> It could also be specified in a version tracked file .hgkeys or so (use the
> keys in the _previous_ revision - that gives a verified line of commits).
>
> That way keys can be specified on a per-repo base and trusted keys can
> easily be added.

That was also my first thought, but wouldn't that make the implementation of 
checksigs difficult?  I.e. every sig would have to be checked with the 
corresponding .hgkeys from the previous revision.

Have a nice day,
  Hans



More information about the Mercurial mailing list