From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ted Ts'o Subject: Re: [git patches] libata updates, GPG signed (but see admin notes) Date: Mon, 31 Oct 2011 18:49:05 -0400 Message-ID: <20111031224905.GQ16825@thunk.org> References: <1319969101.5215.20.camel@dabdike> <1320049150.8283.19.camel@dabdike> <7vy5w1ow90.fsf@alter.siamese.dyndns.org> <4EAF1F40.3030907@zytor.com> <4EAF2245.90308@zytor.com> <7vzkggok6u.fsf@alter.siamese.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "H. Peter Anvin" , Linus Torvalds , git@vger.kernel.org, James Bottomley , Jeff Garzik , Andrew Morton , linux-ide@vger.kernel.org, LKML To: Junio C Hamano X-From: linux-kernel-owner@vger.kernel.org Mon Oct 31 23:49:25 2011 Return-path: Envelope-to: glk-linux-kernel-3@lo.gmane.org Received: from vger.kernel.org ([209.132.180.67]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1RL0fU-0001F8-OH for glk-linux-kernel-3@lo.gmane.org; Mon, 31 Oct 2011 23:49:25 +0100 Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S934715Ab1JaWtR (ORCPT ); Mon, 31 Oct 2011 18:49:17 -0400 Received: from li9-11.members.linode.com ([67.18.176.11]:57941 "EHLO test.thunk.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S934617Ab1JaWtQ (ORCPT ); Mon, 31 Oct 2011 18:49:16 -0400 Received: from root (helo=tytso-glaptop.cam.corp.google.com) by test.thunk.org with local-esmtp (Exim 4.69) (envelope-from ) id 1RL0fC-00013p-TX; Mon, 31 Oct 2011 22:49:06 +0000 Received: from tytso by tytso-glaptop.cam.corp.google.com with local (Exim 4.71) (envelope-from ) id 1RL0fB-0008MR-Ee; Mon, 31 Oct 2011 18:49:05 -0400 Mail-Followup-To: Ted Ts'o , Junio C Hamano , "H. Peter Anvin" , Linus Torvalds , git@vger.kernel.org, James Bottomley , Jeff Garzik , Andrew Morton , linux-ide@vger.kernel.org, LKML Content-Disposition: inline In-Reply-To: <7vzkggok6u.fsf@alter.siamese.dyndns.org> User-Agent: Mutt/1.5.20 (2009-06-14) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: tytso@thunk.org X-SA-Exim-Scanned: No (on test.thunk.org); SAEximRunCond expanded to false Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Archived-At: On Mon, Oct 31, 2011 at 03:44:25PM -0700, Junio C Hamano wrote: > So nobody is worried about this (quoting from my earlier message)? > > On the other hand, the consumers of "Linus kernel" may want to say that > they trust your tree and your tags because they can verify them with your > GPG signature, but also they can independently verify the lieutenants' > trees you pulled from are genuine. > > A signed emphemeral tag is usable as means to verify authenticity in a > hop-by-hop fashion, but that does not leave a permanent trail that can be > used for auditing. Oh, there are definitely people who worry about this. They tend to be security poeple, though, so the goal is how do we leave the permanent trail in a way that doesn't generate too much noise or otherwise makes life difficult for developers who don't care. - Ted