[Gnu-arch-users] signing and push-mirror

[Robert Collins]

Tom,    
        my point on this seems to have been lost in the noise (unless it was
part of it :})

I don't like the aspect of your proposal #2 where push mirror re-signs
changesets as a mandatory thing.

IMO keeping the existing signatures is quite important for the common
case of someone tracking an 'official' repository, who wants to be able
to verify the sigs - in their mirror.

Rob
-- 
GPG key available at: <http://www.robertcollins.net/keys.txt>.

signature.asc
Description: This is a digitally signed message part