Re: [RFC] Authenticate push via PGP signature, not SSH

On Mon, Jan 28, 2008 at 06:12:34AM +0000, Sam Vilain wrote:

This does force potential contributors to get PGP keys, and get them
signed - but that seems to me to be a reasonable barrier of entry and
may even help drive some PGP adoption.

Remember this is a proof of concept, so let's discuss the design first
and not worry too much about the glaring bugs yet.

  FWIW I'm really interested into such a "thing", and that I'd like to
avoid giving unix (even with git-shell, not only because of security,
but because it pollutes the machine setup a lot) accounts to my git
servers, though would like to let people help in my Debian packaging.
Fors us GPG isn't an issue, as every single DD or wannabe has a GPG key
:)

  Note though that the fact that you need to push a dummy tag is somehow
disgusting IMHO, it should at least be integrated into git-push so that
the user doesn't have to generate the dummy tag himself.

-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org