Re: [PATCH 00/10] Pulling signed tag

On Sat, Nov 5, 2011 at 1:01 PM, Junio C Hamano [off-list ref] wrote:

This is my fourth iteration to solve the "how can we allow authenticity of
work by contributors to be validated by the integrator and leave enough
information for later audit by third parties" topic. What is unusual is
that this is not a fourth re-roll of one approach re-re-re-polished, but
these four are all based on different design.

This round is based on Linus's "let the integrator pull signed tag from
the contributor" design.

That thread is really long and I may have missed pieces here and
there. My understanding is that this topic now, while supports kernel
development model, would not address the problem gentoo has, which is
described by Robbin in the same thread [1]. Is that correct?

[1] http://thread.gmane.org/gmane.linux.ide/50518/focus=1210629
-- 
Duy