Signed push progress?
From: Robin H. Johnson <hidden>
Date: 2016-06-15 22:52:07
I haven't seen anything about the status of signed push since earlier in the month, even the what's cooking report marked it as stalled. While I'd previously noted my concerns re the use of SHA1, that's not presently a solvable problems, whereas signed-push does improve security today. Additionally, in the ever ongoing discussion about Gentoo's conversion from CVS to Git (we're very close now), we've decided that the signed pushes will provide better security than our plan of previous plan of using signed notes, so we'd like to see signed pushes succeed. -- Robin Hugh Johnson Gentoo Linux: Developer, Trustee & Infrastructure Lead E-Mail : robbat2@gentoo.org GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85